Home / Vulnerability Intelligence / CVE-2026-5272

CVE-2026-5272 - Vulnerability Analysis

HighCVSS: 8.8

Last Updated: April 1, 2026

Google Chrome - Remote Code Execution

Published: April 1, 2026Updated: April 1, 2026Remote Exploitable

Overview

Google Chrome < 146.0.7680.178 contains a heap buffer overflow in GPU, letting remote attackers execute arbitrary code via crafted HTML pages, exploit requires no special privileges.

Severity & Score

Severity: High

CVSS Score: 8.8

EPSS Score: 1.0%(Probability of exploitation in next 30 days)

Impact

Remote attackers can execute arbitrary code, potentially taking full control of the affected system.

Mitigation

Update to version 146.0.7680.178 or later.

References

Social Media Activity(2 posts)

TheHackerWire

@thehackerwire

Apr 1, 2026

🟠 CVE-2026-5272 - High (8.8) Heap buffer overflow in GPU in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High) 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-5272/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

TheHackerWire

@thehackerwire

Apr 1, 2026

View original post

Related Resources

Details

CVE ID: CVE-2026-5272
Severity: High
CVSS Score: 8.8
Type: buffer_overflow
Status: unconfirmed
EPSS: 1.0%
Social Posts: 2

CWE

CWE-122

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

1.0%Probability of exploitation in the next 30 days