Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
2601 articles · 111465 vulns · 36/41 feeds (7d)
← Back to list
4.3
CVE-2026-6298EXPLOITEDPATCHED
google · chrome

CVE-2026-6298: Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to obtain potentially se

Description

Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Critical)

Affected Products

VendorProductVersions
googlechrome147.0.7727.101, 147.0.7727.55

References

  • https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_15.html
  • https://issues.chromium.org/issues/495700484

Related News (3 articles)

Tier D
Heise Security1d ago
Chrome-Update stopft 31 Sicherheitslücken, davon fünf kritische
→ No new info (linked only)
Tier C
VulDB1d ago
CVE-2026-6298 | Google Chrome up to 147.0.7727.55 Skia heap-based overflow (ID 495700)
→ No new info (linked only)
Tier B
CERT-FR1d ago
Multiples vulnérabilités dans Google Chrome (16 avril 2026)
→ No new info (linked only)
CVSS 3.14.3 CRITICAL
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
CISA KEV❌ No
Actively exploited✅ Yes
Patch available
147.0.7727.101
CWECWE-122
PublishedApr 15, 2026
Last enriched1d agov2
Trending Score54
Source articles3
Independent3
Info Completeness9/14
Missing: epss, kev, exploit, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

HIGHCVE-2026-5873EXP
CVE-2026-5873: Out of bounds read and write in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrar
Trending: 61
HIGHCVE-2026-5292EXP
CVE-2026-5292: Out of bounds read in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to perform an out of
Trending: 59
HIGHCVE-2026-6297EXP
CVE-2026-6297: Use after free in Proxy in Google Chrome prior to 147.0.7727.101 allowed an attacker in a privileged network position to
Trending: 56
HIGHCVE-2026-5281EXPKEV
CVE-2026-5281: Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the render
Trending: 54
HIGHCVE-2026-6318EXP
CVE-2026-6318: Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code in
Trending: 53

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Apr 15, 2026
Discovered by ZDM
Apr 15, 2026
Actively Exploited
Apr 15, 2026
Patch Available
Apr 15, 2026
Updated: affectedVersions, severity, activelyExploited
Apr 16, 2026

Version History

v2
Last enriched 1d ago
v2Tier C1d ago

Updated affected versions to include 147.0.7727.55, changed severity to CRITICAL, and noted that the vulnerability is actively exploited.

affectedVersionsseverityactivelyExploited
via VulDB
v11d ago

Initial creation