Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
2801 articles · 125600 vulns · 38/41 feeds (7d)
← Back to list
8.3
CVE-2026-6921EXPLOITEDPATCHED
google · chrome

CVE-2026-6921: Race in GPU in Google Chrome on Windows prior to 147.0.7727.117 allowed a remote attacker to potentially perform a sandb

Description

Race in GPU in Google Chrome on Windows prior to 147.0.7727.117 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. (Chromium security severity: Medium)

Affected Products

VendorProductVersions
googlechrome147.0.7727.117

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
googlechromecert_advisory90%
googleandroidcve_cpe95%
linuxlinux_kernelcve_cpe95%
microsoftwindowscve_cpe95%

References

  • https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_22.html
  • https://issues.chromium.org/issues/493315759

Related News (3 articles)

Tier B
CERT-FR1d ago
Multiples vulnérabilités dans Microsoft Edge (27 avril 2026)
→ No new info (linked only)
Tier B
BSI Advisories4d ago
[NEU] [hoch] Google Chrome: Mehrere Schwachstellen
→ No new info (linked only)
Tier C
VulDB5d ago
CVE-2026-6921 | Google Chrome up to 147.0.7727.101 on Windows GPU race condition
→ No new info (linked only)
CVSS 3.18.3 HIGH
VectorCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
CISA KEV❌ No
Actively exploited✅ Yes
Patch available
147.0.7727.117
CWECWE-362, CWE-20
PublishedApr 23, 2026
Last enriched4d agov3
Tags
code executiondenial of serviceinformation disclosuredata manipulation
Trending Score52
Source articles3
Independent3
Info Completeness10/14
Missing: epss, kev, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

CRITICALCVE-2026-6919EXP
CVE-2026-6919: Use after free in DevTools in Google Chrome prior to 147.0.7727.117 allowed a remote attacker who had compromised the re
Trending: 71
CRITICALCVE-2026-6920EXP
CVE-2026-6920: Out of bounds read in GPU in Google Chrome on Android prior to 147.0.7727.117 allowed a remote attacker who had compromi
Trending: 67
HIGHCVE-2026-39858EXP
Traefik: Pre-authentication decision bypass due to forwarded alias spoofing
Trending: 36
HIGHCVE-2026-35051
Traefik's ForwardAuth trustForwardHeader=false allows spoofed X-Forwarded-Prefix to bypass authentication
Trending: 23
HIGHCVE-2026-40912
Traefik has an StripPrefixRegex Middleware Authorization Bypass via Path/RawPath Desync
Trending: 23

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Apr 23, 2026
Discovered by ZDM
Apr 23, 2026
Updated: affectedVersions, severity
Apr 23, 2026
Updated: exploitAvailable, activelyExploited
Apr 24, 2026
Actively Exploited
Apr 24, 2026
Exploit Available
Apr 24, 2026
Patch Available
Apr 24, 2026

Version History

v3
Last enriched 4d ago
v3Tier B4d ago

Marked exploitAvailable and activelyExploited as true based on new article information.

exploitAvailableactivelyExploited
via BSI Advisories
v2Tier C5d ago

Updated affected versions to include 147.0.7727.101 and changed severity to HIGH.

affectedVersionsseverity
via VulDB
v15d ago

Initial creation