7.5 HighCWE-416
CVE-2026-5284
Google Chrome vulnerability
GoogleChrome
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 26 Oct
0.3%probability of exploitation in the next 30 days
Higher than 27% of scored CVEs
SeverityCVSS
7.5High
Description NVD
Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
Coverage 1 article · 1 outlet
- Exploited Zero-Day Among 21 Vulnerabilities Patched in ChromeSecurityWeek · first in our coverage · mentions it in passing