Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
2843 articles · 109942 vulns · 38/41 feeds (7d)
← Back to list
6.5
CVE-2026-5864EXPLOITEDPATCHED
google · chrome

CVE-2026-5864: Heap buffer overflow in WebAudio in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially

Description

Heap buffer overflow in WebAudio in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)

Affected Products

VendorProductVersions
googlechrome147.0.7727.55

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
googlechromecert_advisory90%
microsoftmicrosoft edgecert_advisory90%

References

  • https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html
  • https://issues.chromium.org/issues/490642831

Related News (3 articles)

Tier A
Microsoft MSRC1h ago
Chromium: CVE-2026-5864 Heap buffer overflow in WebAudio
→ No new info (linked only)
Tier B
BSI Advisories1d ago
[NEU] [hoch] Google Chrome und Microsoft Edge: Mehrere Schwachstellen
→ No new info (linked only)
Tier C
VulDB2d ago
CVE-2026-5864 | Google Chrome up to 146.0.7680.178 WebAudio heap-based overflow (ID 490642)
→ No new info (linked only)
CVSS 3.16.5 MEDIUM
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
CISA KEV❌ No
Actively exploited✅ Yes
Patch available
146.0.7680.178
CWECWE-122
PublishedApr 8, 2026
Last enriched6h agov3
Trending Score68
Source articles3
Independent3
Info Completeness10/14
Missing: epss, kev, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

HIGHCVE-2026-5281EXPKEV
CVE-2026-5281: Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the render
Trending: 140
CRITICALCVE-2026-5858EXP
CVE-2026-5858: Heap buffer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary cod
Trending: 81
HIGHCVE-2026-5859EXP
CVE-2026-5859: Integer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap
Trending: 75
MEDIUMCVE-2026-5869EXP
CVE-2026-5869: Heap buffer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially se
Trending: 68
MEDIUMCVE-2026-5867EXP
CVE-2026-5867: Heap buffer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially se
Trending: 68

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Apr 8, 2026
Discovered by ZDM
Apr 8, 2026
Updated: description, affectedVersions, severity, patchAvailable
Apr 9, 2026
Actively Exploited
Apr 10, 2026
Exploit Available
Apr 10, 2026
Patch Available
Apr 10, 2026
Updated: exploitAvailable, activelyExploited
Apr 10, 2026

Version History

v3
Last enriched 6h ago
v3Tier A6h ago

Updated vendor to Microsoft, added product Edge, and marked exploit as available and actively exploited.

exploitAvailableactivelyExploited
via Microsoft MSRC
v2Tier C2d ago

Updated severity to CRITICAL, added affected version 146.0.7680.178, and provided a more detailed description.

descriptionaffectedVersionsseveritypatchAvailable
via VulDB
v12d ago

Initial creation