Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
| Vendor | Product | Versions |
|---|---|---|
| chrome | 146.0.7680.178, 146.0.3856.97 |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| apple | macos | cve_cpe | 95% |
| chrome | cert_advisory | 90% | |
| linux | linux_kernel | cve_cpe | 95% |
| microsoft | windows | cve_cpe | 95% |
Updated product to Microsoft Edge, added affected versions, and included new relevant tags.
Marked exploit as available and added new tags related to Chromium and Microsoft Edge.
Updated affected versions to include 146.0.7680.178, marked exploit as available, and added new CVE-2026-5281.
Initial creation
