Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
Priority
MEDIUM
Exploitation
ACTIVE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 4 products
| Date | Total | Labels |
|---|
| 2026-04-01 | 2 | Disclosure2 |
| 2026-04-02 | 1 | Active Exploitation1 |
【セキュリティ ニュース】「Chrome」にアップデート、脆弱性21件を修正 - 一部で悪用も：Security NEXT https://www.security-next.com/182865 『「Dawn」に関する脆弱性「CVE-2026-5281」「CVE-2026-5284」「CVE-2026-5286」を修正。なかでも「CVE-2026-5281」に関してはすでに悪用が確認されているという』
Post summary
The news announces updates fixing 21 Chrome vulnerabilities, including several Dawn CVEs, and notes that CVE-2026-5281 has already been actively exploited.
CVE-2026-5284 Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a craft… https://www.cve.org/CVERecord?id=CVE-2026-5284
Post summary
The text describes a use‑after‑free flaw in Chrome’s Dawn engine that could allow a remote attacker with renderer process compromise to achieve arbitrary code execution, but no PoC, exploit, patch, or active exploitation details are supplied.
CVE-2026-5284 Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. (Chromium securit... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-5284
Post summary
CVE-2026-5284 describes a use‑after‑free in the Chrome Dawn engine that could let a compromised renderer process execute arbitrary code through a crafted HTML page. No PoC, exploit, or patch details are offered in the snippet.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | apple | macos | - | - | - |
| App | chrome | - | - | - | |
| OS | linux | linux_kernel | - | - | - |
| OS | microsoft | windows | - | - | - |