This report was translated by AI; nobody has reviewed the translation yet. Original language: Slovak.

[TLP:CLEAR] Google Chrome fixes 1 actively exploited vulnerability

Google fixes 1 high-severity, actively exploited vulnerability in Google Chrome and other browsers based on the Chromium engine. The latest fix was released for Windows/macOS (versions 146.0.7680.177 and 146.0.7680.178) and Linux (version 146.0.7680.177) [1][2].

Google Chrome - use after free (CVE-2026-5281)
CVSS 8.8 (High)

An unauthenticated remote attacker can exploit a pointer to already freed memory in the Dawn component, which, via a specially crafted HTML page, may cause an application crash, unauthorized modification of data in memory or code execution. The vulnerability is already being actively exploited [1][2].

The vulnerability is present in products:

  • Windows: Google Chrome; <146.0.7680.177;
  • Mac: Google Chrome; <146.0.7680.177;
  • Linux: Google Chrome; <146.0.7680.177;

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

More information:

The vulnerability was publicly disclosed 1. 4. 2026.

By CESNET, z.s.p.o. Henrieta Paločková on 8. 4. 2026.

CESNET, z.s.p.o. Logo