Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
2060 articles · 104273 vulns · 38/41 feeds (7d)
← Back to list
8.8
CVE-2026-5286EXPLOITEDPATCHED
google · chrome

CVE-2026-5286: Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via

Description

Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

Affected Products

VendorProductVersions
googlechrome146.0.7680.178

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
applemacoscve_cpe95%
googlechromecert_advisory90%
linuxlinux_kernelcve_cpe95%
microsoftwindowscve_cpe95%

References

  • https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_31.html
  • https://issues.chromium.org/issues/493900619

Related News (3 articles)

Tier A
Microsoft MSRC2d ago
Chromium: CVE-2026-5286 Use after free in Dawn
→ No new info (linked only)
Tier B
BSI Advisories4d ago
[NEU] [hoch] Google Chrome: Mehrere Schwachstellen
→ No new info (linked only)
Tier B
CERT-FR4d ago
Multiples vulnérabilités dans Google Chrome (01 avril 2026)
→ No new info (linked only)
CVSS 3.18.8 HIGH
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CISA KEV❌ No
Actively exploited✅ Yes
Patch available
146.0.7680.177
CWECWE-416
PublishedApr 1, 2026
Last enriched2d agov2
Trending Score45
Source articles3
Independent3
Info Completeness10/14
Missing: epss, kev, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

HIGHCVE-2026-5281EXPKEV
CVE-2026-5281: Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the render
Trending: 152
HIGHCVE-2026-3909EXPKEV
Out of bounds write in Skia in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
Trending: 90
HIGHCVE-2026-3910EXPKEV
Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Hi
Trending: 90
HIGHCVE-2026-2441EXPKEV
Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Trending: 61
HIGHCVE-2026-5284EXP
CVE-2026-5284: Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the render
Trending: 48

Pin to Dashboard

Verification

State: verified
Confidence: 100%

Vulnerability Timeline

CVE Published
Apr 1, 2026
Discovered by ZDM
Apr 1, 2026
Actively Exploited
Apr 2, 2026
Exploit Available
Apr 2, 2026
Patch Available
Apr 2, 2026
Updated: exploitAvailable, activelyExploited
Apr 2, 2026

Version History

v2
Last enriched 2d ago
v2Tier A2d ago

Updated vendor to Microsoft, added product Edge, and marked exploit as available and actively exploited.

exploitAvailableactivelyExploited
via Microsoft MSRC
v13d ago

Initial creation