Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
2608 articles · 111476 vulns · 36/41 feeds (7d)
← Back to list
8.8
CVE-2026-6316EXPLOITEDPATCHED
google · chrome

CVE-2026-6316: Use after free in Forms in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code ins

Description

Use after free in Forms in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Affected Products

VendorProductVersions
googlechrome147.0.7727.101

References

  • https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_15.html
  • https://issues.chromium.org/issues/499384399

Related News (4 articles)

Tier A
Microsoft MSRC2h ago
Chromium: CVE-2026-6316 Use after free in Forms
→ No new info (linked only)
Tier C
VulDB1d ago
CVE-2026-6316 | Google Chrome up to 147.0.7727.55 Forms use after free (ID 499384)
→ No new info (linked only)
Tier C
VulDB1d ago
CVE-2026-6316 | Google Chrome up to 147.0.7727.55 Forms use after free (ID 499384)
→ No new info (linked only)
Tier B
CERT-FR1d ago
Multiples vulnérabilités dans Google Chrome (16 avril 2026)
→ No new info (linked only)
CVSS 3.18.8 HIGH
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CISA KEV❌ No
Actively exploited✅ Yes
Patch available
147.0.7727.55
CWECWE-416
PublishedApr 15, 2026
Last enriched34m agov3
Trending Score68
Source articles5
Independent3
Info Completeness10/14
Missing: epss, kev, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

CRITICALCVE-2026-6296EXP
CVE-2026-6296: Heap buffer overflow in ANGLE in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially perform
Trending: 74
HIGHCVE-2026-6297EXP
CVE-2026-6297: Use after free in Proxy in Google Chrome prior to 147.0.7727.101 allowed an attacker in a privileged network position to
Trending: 71
HIGHCVE-2026-6299EXP
CVE-2026-6299: Use after free in Prerender in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code
Trending: 71
CRITICALCVE-2026-6298EXP
CVE-2026-6298: Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to obtain potentially se
Trending: 69
HIGHCVE-2026-6318EXP
CVE-2026-6318: Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code in
Trending: 68

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Apr 15, 2026
Discovered by ZDM
Apr 15, 2026
Updated: severity, activelyExploited, patchAvailable
Apr 16, 2026
Actively Exploited
Apr 16, 2026
Exploit Available
Apr 16, 2026
Patch Available
Apr 16, 2026
Updated: exploitAvailable
Apr 17, 2026

Version History

v3
Last enriched 34m ago
v3Tier A34m ago

Updated vendor to Microsoft and added that the exploit is now available.

exploitAvailable
via Microsoft MSRC
v2Tier C1d ago

Updated severity to CRITICAL, noted that no exploit is available, and changed the patch version to 147.0.7727.55.

severityactivelyExploitedpatchAvailable
via VulDB
v11d ago

Initial creation