Use After Free Vulnerability in Google Chrome Video Component
CVE-2026-6359

8.8HIGH

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
15 April 2026

What is CVE-2026-6359?

A use after free vulnerability has been identified in the Video component of Google Chrome on Windows systems. This flaw allows remote attackers to exploit the renderer process, performing out of bounds memory access through the execution of a specially crafted HTML page. The vulnerability impacts users on versions of Google Chrome prior to 147.0.7727.101, posing a significant security risk that can lead to potential code execution in compromised environments.

Affected Version(s)

Chrome 147.0.7727.101

References

https://chromereleases.googleblog.com/2026/04/stable-chan...
https://issues.chromium.org/issues/490251701

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.