Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
2379 articles · 130732 vulns · 36/41 feeds (7d)
← Back to list
9.6
CVE-2026-7333EXPLOITEDPATCHED
google · chrome

CVE-2026-7333: Use after free in GPU in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially perform a sandbo

Description

Use after free in GPU in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

Affected Products

VendorProductVersions
googlechrome147.0.7727.138

References

  • https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_28.html
  • https://issues.chromium.org/issues/493955227

Related News (2 articles)

Tier A
Microsoft MSRC-3343s ago
Chromium: CVE-2026-7333 Use after free in GPU
→ No new info (linked only)
Tier C
VulDB2d ago
CVE-2026-7333 | Google Chrome up to 147.0.7727.117 GPU use after free (ID 493955)
→ No new info (linked only)
CVSS 3.19.6 CRITICAL
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CISA KEV❌ No
Actively exploited✅ Yes
Patch available
147.0.7727.117
CWECWE-416
PublishedApr 28, 2026
Last enriched3h agov3
Trending Score68
Source articles3
Independent2
Info Completeness10/14
Missing: epss, kev, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

HIGHCVE-2026-2441EXPKEV
Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Trending: 95
CRITICALCVE-2026-7343EXP
CVE-2026-7343: Use after free in Views in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote attacker who had compromise
Trending: 75
HIGHCVE-2026-7344EXP
CVE-2026-7344: Use after free in Accessibility in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote attacker who had co
Trending: 72
HIGHCVE-2026-7363EXP
CVE-2026-7363: Use after free in Canvas in Google Chrome on Linux, ChromeOS prior to 147.0.7727.138 allowed a remote attacker to execut
Trending: 72
HIGHCVE-2026-7355EXP
CVE-2026-7355: Use after free in Media in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code ins
Trending: 69

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Apr 28, 2026
Discovered by ZDM
Apr 28, 2026
Updated: severity, patchAvailable
Apr 29, 2026
Actively Exploited
Apr 30, 2026
Exploit Available
Apr 30, 2026
Patch Available
Apr 30, 2026
Updated: exploitAvailable, activelyExploited
May 1, 2026

Version History

v3
Last enriched 3h ago
v3Tier A3h ago

Updated vendor to Microsoft, added product Edge, and marked exploit as available and actively exploited.

exploitAvailableactivelyExploited
via Microsoft MSRC
v2Tier C2d ago

Updated severity to CRITICAL and patch available version to 147.0.7727.117.

severitypatchAvailable
via VulDB
v12d ago

Initial creation