Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
Out of bounds read and write in WebGL in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: Critical)
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 4 products
| Date | Total | Labels |
|---|
| 2026-03-20 | 2 | Disclosure2 |
| 2026-03-21 | 1 | Patch1 |
| 2026-03-26 | 1 | Patch1 |
| 2026-04-13 | 1 | Disclosure1 |
| 2026-04-14 | 1 | Disclosure1 |
📌 CVE-2026-4440: Google Chrome WebGL Out-of-Bounds Read/Write Vulnerability Allows Remote Code Execution. 🤔 #opendir http://100.48.195[.]190/
Post summary
The text announces CVE‑2026‑4440, detailing a WebGL out‑of‑bounds read/write flaw in Google Chrome that enables remote code execution, and provides a link that may lead to further information or a PoC.
🚨 CHROME SECURITY UPDATE 🚨: Everyone should force Google Chrome update now. It fixes 26 vulnerabilities, 3 of them being critical: - CVE-2026-4439 > WebGL - Out of bounds memory access - CVE-2026-4440 > WebGL > Out of bounds read and write - CVE-2026-4441 > Base - Use after free 👉 How to: Top right > 3 dots > Settings > About Chrome > Update and relaunch.
Post summary
The post alerts users of a Chrome update that patches 26 vulnerabilities, including 3 critical ones, and instructs how to perform the update.
(CVE-2026-4440)[485935305][WebGL]OOBRW https://chromium-review.googlesource.com/c/chromium/src/+/7630664 Reported by c6eed09fc8b174b0f3eebedcceb1e792
Post summary
The message announces CVE‑2026‑4440 for Chromium, indicating an out‑of‑bounds read/write flaw and links to a code review, but provides no PoC, exploit, or patch details.
@1ZRR4H Notable find, @1ZRR4H. 🚨 CVE-2026-4440 highlights a critical WebGL out-of-bounds read/write flaw in Google Chrome that could lead to RCE. With PoCs already circulating, timely patching and browser updates are essential. Track it on Vulntracker: https://vulntracker.io
Post summary
The post announces CVE-2026-4440, a critical WebGL out-of-bounds flaw in Chrome that allows RCE, notes existing PoCs, and urges users to apply patches promptly.
#securityupdate #chrome Google が，Chrome 146.0.7680.153/154 (Windows および Mac) および 146.0.7680.153 (Linux) をリリース． CVE ベースで Critical 3 件 ・CVE-2026-4439 ・CVE-2026-4440 ・CVE-2026-4441 High 22 件の全 26 件の脆弱性に対処． https://x.com/kawn2020/status/2037071642309067082
Post summary
Google released Chrome 146.0.7680.153/154 with patches for 26 vulnerabilities, including 3 critical CVEs (2026‑4439, 4440, 4441).
CVE-2026-4440 Out of bounds read and write in WebGL in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chrom… https://www.cve.org/CVERecord?id=CVE-2026-4440
Post summary
The text announces CVE-2026-4440 as an out-of-bounds memory access in Chrome's WebGL, allowing arbitrary read/write through a crafted HTML page, without reference to PoC, exploitation, or mitigation.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | apple | macos | - | - | - |
| App | chrome | - | - | - | |
| OS | linux | linux_kernel | - | - | - |
| OS | microsoft | windows | - | - | - |