CVE-2026-4676 — Vulnetix

CVE-2026-4676 PUBLISHED CVSS 8.800000190734863 HIGH

Heap buffer overflow in WebAudio in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)

EPSS 0.05% · 16.3th percentile

Risk Scores

CVSS 3.1

8.800000190734863

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

0.05%

16.3th percentile

Affected Products

Vendor	Product	Versions
google	chrome	0, 0, 0
Google	Chrome	146.0.7680.165, 146.0.7680.165, 146.0.7680.165

Timeline

Mar 24, 2026 CVE Published
Mar 24, 2026 EPSS Score
Mar 24, 2026 PoC Published
Mar 24, 2026 PoC Published
Mar 24, 2026 PoC Published
Mar 24, 2026 PoC Published
Mar 24, 2026 PoC Published
Mar 24, 2026 PoC Published
Mar 24, 2026 PoC Published
Mar 24, 2026 PoC Published
Mar 24, 2026 PoC Published
Mar 24, 2026 PoC Published

References

https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_23.html url
https://issues.chromium.org/issues/488613135 url
https://nvd.nist.gov/vuln/detail/CVE-2026-4676 advisory
https://issues.chromium.org/issues/485397284 url

Open in Interactive Console →