Home / Vulnerability Intelligence / CVE-2026-5275

CVE-2026-5275 - Vulnerability Analysis

HighCVSS: 8.8

Last Updated: April 1, 2026

Google Chrome - Remote Code Execution

Published: April 1, 2026Updated: April 1, 2026Remote Exploitable

Overview

Google Chrome < 146.0.7680.178 contains a heap buffer overflow caused by improper memory handling in ANGLE, letting remote attackers execute arbitrary code via crafted HTML pages, exploit requires no special privileges.

Severity & Score

Severity: High

CVSS Score: 8.8

EPSS Score: 3.5%(Probability of exploitation in next 30 days)

Impact

Remote attackers can execute arbitrary code, potentially leading to full system compromise.

Mitigation

Update to version 146.0.7680.178 or later.

References

Social Media Activity(2 posts)

TheHackerWire

@thehackerwire

Apr 1, 2026

🟠 CVE-2026-5275 - High (8.8) Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High) 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-5275/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

TheHackerWire

@thehackerwire

Apr 1, 2026

View original post

Related Resources

Details

CVE ID: CVE-2026-5275
Severity: High
CVSS Score: 8.8
Type: buffer_overflow
Status: confirmed
EPSS: 3.5%
Social Posts: 2

CWE

CWE-122

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

3.5%Probability of exploitation in the next 30 days