CVE-2026-5281

HIGH8.8⚠ KEVEPSS 0.65%

Google Dawn Use-After-Free Vulnerability

發布日:2026/4/1修改日:2026/4/28加入 CISA KEV 日:2026/4/1

描述

Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

受影響套件(1)

CVSS 分數

來源版本嚴重程度向量
osvCVSS 3.1HIGH8.8CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

參考連結(1)