CVE-2026-4440 - Vulnerability Analysis

Overview

Google Chrome < 146.0.7680.153 contains an out of bounds read and write vulnerability in WebGL, letting remote attackers perform arbitrary read/write via crafted HTML pages, exploit requires no special privileges.

Severity & Score

Impact

Remote attackers can perform arbitrary read and write operations, potentially leading to full system compromise.

Mitigation

Update to version 146.0.7680.153 or later.

References

• https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_18.html
• https://issues.chromium.org/issues/485935305

Social Media Activity(1 post)

Catalin Cimpanu

@campuscodi

Apr 19, 2026

Exploit code for a recently patched Chrome vulnerability has leaked online via a misconfigured server. Security firm Breakglass believes the code is the work of a "professional exploit developer," and most intended for "sale or government use." https://intel.breakglass.tech/post/cve-2026-4440-chrome-exploit-dev-server-open-directory

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner