Home / Vulnerability Intelligence / CVE-2026-4676

CVE-2026-4676 - Vulnerability Analysis

HighCVSS: 8.8

Last Updated: March 24, 2026

Google Chrome - Use After Free

Published: March 24, 2026Updated: March 24, 2026Remote Exploitable

Overview

Google Chrome < 146.0.7680.165 contains a use after free vulnerability in Dawn, letting remote attackers potentially perform sandbox escape via crafted HTML page, exploit requires crafted HTML content.

Severity & Score

Severity: High

CVSS Score: 8.8

EPSS Score: 0.0%(Probability of exploitation in next 30 days)

Impact

Remote attackers can escape the sandbox, potentially gaining higher privileges or executing arbitrary code.

Mitigation

Update to version 146.0.7680.165 or later.

References

Social Media Activity(2 posts)

TheHackerWire

@thehackerwire

Mar 24, 2026

🟠 CVE-2026-4676 - High (8.8) Use after free in Dawn in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-4676/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

TheHackerWire

@thehackerwire

Mar 24, 2026

View original post

Related Resources

Details

CVE ID: CVE-2026-4676
Severity: High
CVSS Score: 8.8
Type: use_after_free
Status: new
EPSS: 0.0%
Social Posts: 2

CWE

CWE-416

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

0.0%Probability of exploitation in the next 30 days