Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
2856 articles · 109426 vulns · 38/41 feeds (7d)
← Back to list
0.0
CVE-2026-5883EXPLOITEDPATCHED
google · google chrome

CVE-2026-5883: Use after free in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code insi

Description

A vulnerability described as critical has been identified in Google Chrome. This affects an unknown part of the component Media. The manipulation results in use after free. The attack may be launched remotely.

Affected Products

VendorProductVersions
googlegoogle chrome147.0.7727.55, 146.0.7680.178

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
googlechromecert_advisory90%
microsoftmicrosoft edgecert_advisory90%

References

  • https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html
  • https://issues.chromium.org/issues/482958590

Related News (2 articles)

Tier B
BSI Advisories3h ago
[NEU] [hoch] Google Chrome und Microsoft Edge: Mehrere Schwachstellen
→ No new info (linked only)
Tier C
VulDB13h ago
CVE-2026-5883 | Google Chrome up to 146.0.7680.178 Media use after free (ID 482958)
→ No new info (linked only)
CVSS 3.10.0 CRITICAL
CISA KEV❌ No
Actively exploited✅ Yes
Patch available
147.0.7727.55
CWECWE-416
PublishedApr 8, 2026
Last enriched13h agov2
Trending Score60
Source articles2
Independent2
Info Completeness9/14
Missing: epss, kev, exploit, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

HIGHCVE-2026-5281EXPKEV
CVE-2026-5281: Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the render
Trending: 118
CRITICALCVE-2026-5858EXP
CVE-2026-5858: Heap buffer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary cod
Trending: 68
CRITICALCVE-2026-5859EXP
CVE-2026-5859: Integer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap
Trending: 64
CRITICALCVE-2026-5860EXP
CVE-2026-5860: Use after free in WebRTC in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code ins
Trending: 60
CRITICALCVE-2026-5896EXP
CVE-2026-5896: Policy bypass in Audio in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage
Trending: 60

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Apr 8, 2026
Discovered by ZDM
Apr 8, 2026
Actively Exploited
Apr 8, 2026
Patch Available
Apr 8, 2026
Updated: description, severity, cvssEstimate, activelyExploited, affectedVersions
Apr 9, 2026

Version History

v2
Last enriched 13h ago
v2Tier C13h ago

Updated severity to CRITICAL, added new affected version 146.0.7680.178, and corrected exploit availability status.

descriptionseveritycvssEstimateactivelyExploitedaffectedVersions
via VulDB
v116h ago

Initial creation