Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
3522 articles · 168920 vulns · 37/41 feeds (7d)
← Back to list
8.8
CVE-2026-6307EXPLOITEDPATCHED
google · chrome

CVE-2026-6307: Type Confusion in Turbofan in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code

Description

Type Confusion in Turbofan in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Affected Products

VendorProductVersions
googlechrome147.0.7727.101

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
applemacoscve_cpe95%
linuxlinux_kernelcve_cpe95%
microsoftwindowscve_cpe95%

References

  • https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_15.html
  • https://issues.chromium.org/issues/497404188

Related News (4 articles)

Tier E
Lobsters Security1d ago
Longinus: 2 Boundaries in One Bug, Piercing Chrome’s Renderer and V8 Sandbox with a Single Vulnerability, CVE-2026-6307
→ No new info (linked only)
Tier A
Microsoft MSRC74d ago
Chromium: CVE-2026-6307 Type Confusion in Turbofan
→ No new info (linked only)
Tier C
VulDB75d ago
CVE-2026-6307 | Google Chrome up to 147.0.7727.55 Turbofan type confusion (ID 497404)
→ No new info (linked only)
Tier B
CERT-FR75d ago
Multiples vulnérabilités dans Google Chrome (16 avril 2026)
→ No new info (linked only)
CVSS 3.18.8 HIGH
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS0.00(Top 87%)
CISA KEV❌ No
Actively exploited✅ Yes
Patch available
147.0.7727.101
CWECWE-843
PublishedApr 15, 2026
Last enriched74d agov3
Trending Score62
Source articles4
Independent4
Info Completeness10/14
Missing: epss, kev, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

HIGHCVE-2026-12448EXP
CVE-2026-12448: Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker to
Trending: 54
HIGHCVE-2026-12030EXP
CVE-2026-12030: Out of bounds write in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had comprom
Trending: 54
HIGHCVE-2026-12028EXP
CVE-2026-12028: Use after free in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised
Trending: 54
HIGHCVE-2026-11647EXP
CVE-2026-11647: Use after free in Printing in Google Chrome on Android prior to 149.0.7827.103 allowed a remote attacker who had comprom
Trending: 54
HIGHCVE-2026-13022EXP
CVE-2026-13022: Inappropriate implementation in Autofill in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had comp
Trending: 53

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Apr 15, 2026
Discovered by ZDM
Apr 15, 2026
Updated: severity, affectedVersions, activelyExploited
Apr 16, 2026
Actively Exploited
Apr 16, 2026
Exploit Available
Apr 16, 2026
Patch Available
Apr 16, 2026
Updated: exploitAvailable
Apr 17, 2026

Version History

v3
Last enriched 74d ago
v3Tier A74d ago

Updated vendor to Microsoft and product to Edge, and marked exploit as available.

exploitAvailable
via Microsoft MSRC
v2Tier C75d ago

Updated severity to CRITICAL, added affected version 147.0.7727.55, and marked the vulnerability as actively exploited.

severityaffectedVersionsactivelyExploited
via VulDB
v175d ago

Initial creation