Use After Free Vulnerability in Google Chrome Forms by Google
CVE-2026-6316

8.8HIGH

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
15 April 2026

What is CVE-2026-6316?

A vulnerability exists in the Forms component of Google Chrome, where improper memory management leads to a use after free condition. This flaw could allow a remote attacker to craft a malicious HTML page that, when opened by a user, could execute arbitrary code within the browser's sandbox environment, potentially compromising the user's data and system integrity. Users are advised to update their Chrome browser to the latest version to mitigate risks associated with this vulnerability.

Affected Version(s)

Chrome 147.0.7727.101

References

https://chromereleases.googleblog.com/2026/04/stable-chan...
https://issues.chromium.org/issues/499384399

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.