Race Condition Vulnerability in Google Chrome for Windows
CVE-2026-6921

5.3MEDIUM

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
23 April 2026

What is CVE-2026-6921?

A race condition vulnerability exists in Google Chrome for Windows, which could allow an attacker to escape the browser's sandbox security measures. This situation arises when a specially crafted video file is processed, enabling the potential for malicious code execution outside the intended environment. Users are advised to update their Google Chrome browser to version 147.0.7727.117 or later to mitigate the risk associated with this vulnerability.

Affected Version(s)

Chrome 147.0.7727.117

References

https://chromereleases.googleblog.com/2026/04/stable-chan...
https://issues.chromium.org/issues/493315759

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.