Use After Free Vulnerability in Graphite in Google Chrome
CVE-2026-6304

8.3HIGH

Key Information:

Vendor

Google

Status
Vendor
CVE Published:
15 April 2026

What is CVE-2026-6304?

An issue in the Graphite component of Google Chrome allows remote attackers to potentially perform a sandbox escape through a crafted HTML page. This occurs due to improper memory management leading to a use after free condition. When the renderer process is compromised, the attacker can exploit this vulnerability to gain unauthorized access and execute malicious actions within the user's environment.

Affected Version(s)

Chrome 147.0.7727.101

References

CVSS V3.1

Score:
8.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.