VDB

CESS-2026-5285

CESS-2026-5285 PUBLISHED CVSS 8.8 HIGH

Use after free in WebGL in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Risk Scores

CVSS 3.1
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Timeline

  • Apr 1, 2026 CVE Published
Open in Interactive Console →
$ Console Community · 100/wk Open console ›