Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
2402 articles · 111888 vulns · 38/41 feeds (7d)
← Back to list
8.8
CVE-2026-6299EXPLOITEDPATCHED
google · chrome

CVE-2026-6299: Use after free in Prerender in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code

Description

Use after free in Prerender in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)

Affected Products

VendorProductVersions
googlechrome147.0.7727.101

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
applemacoscve_cpe95%
linuxlinux_kernelcve_cpe95%
microsoftwindowscve_cpe95%

References

  • https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_15.html
  • https://issues.chromium.org/issues/497053588

Related News (6 articles)

Tier D
The Hacker News3h ago
⚡ Weekly Recap: Vercel Hack, Push Fraud, QEMU Abused, New Android RATs Emerge & More
→ No new info (linked only)
Tier B
CERT-FR16h ago
Multiples vulnérabilités dans Microsoft Edge (20 avril 2026)
→ No new info (linked only)
Tier A
Microsoft MSRC3d ago
Chromium: CVE-2026-6299 Use after free in Prerender
→ No new info (linked only)
Tier D
Heise Security4d ago
Chrome-Update stopft 31 Sicherheitslücken, davon fünf kritische
→ No new info (linked only)
Tier C
VulDB4d ago
CVE-2026-6299 | Google Chrome up to 147.0.7727.55 Prerender use after free (ID 497053)
→ No new info (linked only)
Tier B
CERT-FR4d ago
Multiples vulnérabilités dans Google Chrome (16 avril 2026)
→ No new info (linked only)
CVSS 3.18.8 HIGH
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CISA KEV❌ No
Actively exploited✅ Yes
Patch available
147.0.7727.101
CWECWE-416
PublishedApr 15, 2026
Last enriched3d agov3
Trending Score74
Source articles6
Independent5
Info Completeness10/14
Missing: epss, kev, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

CRITICALCVE-2026-6296EXP
CVE-2026-6296: Heap buffer overflow in ANGLE in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially perform
Trending: 77
HIGHCVE-2026-6297EXP
CVE-2026-6297: Use after free in Proxy in Google Chrome prior to 147.0.7727.101 allowed an attacker in a privileged network position to
Trending: 74
HIGHCVE-2026-5873EXP
CVE-2026-5873: Out of bounds read and write in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrar
Trending: 74
CRITICALCVE-2026-6298EXP
CVE-2026-6298: Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to obtain potentially se
Trending: 72
HIGHCVE-2026-6305EXP
CVE-2026-6305: Heap buffer overflow in PDFium in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary c
Trending: 62

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Apr 15, 2026
Discovered by ZDM
Apr 15, 2026
Updated: affectedVersions, severity
Apr 16, 2026
Actively Exploited
Apr 16, 2026
Exploit Available
Apr 16, 2026
Patch Available
Apr 16, 2026
Updated: exploitAvailable, activelyExploited
Apr 17, 2026

Version History

v3
Last enriched 3d ago
v3Tier A3d ago

Updated vendor to Microsoft, added product Edge, and marked exploit as available and actively exploited.

exploitAvailableactivelyExploited
via Microsoft MSRC
v2Tier C4d ago

Updated affected versions to include 147.0.7727.55 and changed severity to CRITICAL.

affectedVersionsseverity
via VulDB
v14d ago

Initial creation