CVE-2026-6310 - Vulnerability Analysis

Overview

Google Chrome < 147.0.7727.101 contains a use after free vulnerability in Dawn, letting remote attackers who have compromised the renderer process potentially perform a sandbox escape via crafted HTML, exploit requires compromised renderer process.

Severity & Score

Impact

Attackers with renderer process access can escape sandbox, potentially leading to full system compromise.

Mitigation

Update to version 147.0.7727.101 or later.

References

• https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_15.html
• https://issues.chromium.org/issues/497969820

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner