Object Corruption Vulnerability in Google Chrome
CVE-2026-6360

8.8HIGH

Key Information:

Vendor

Google

Status
Vendor
CVE Published:
15 April 2026

What is CVE-2026-6360?

A vulnerability exists in Google Chrome's FileSystem component, where a use-after-free condition may be exploited by remote attackers. This occurs when the browser does not properly manage memory, allowing an adversary to manipulate the application's behavior through a maliciously crafted HTML page. Successful exploitation could lead to unexpected object corruption, potentially compromising user data or facilitating further attacks on the system.

Affected Version(s)

Chrome 147.0.7727.101

References

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.