CVE-2026-6359Disclosure(google / chrome)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch google chrome systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Use after free in Video in Google Chrome on Windows prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

google CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_15.html

Other references

https://issues.chromium.org/issues/490251701

Weakness type (CWE)

CWE-416

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

chrome

Threat summary

Patch or workaround signal is available
5 mentions across 3 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 4 signals
Disclosure: 3 classified signals
General: 1 classified signal
Peaked 1d ago at 3 mentions (2026-04-16); latest day: 1
5 total mentions across 3 days

Affected systems

Vendors

google

Products

chrome

Deep dive

Activity timeline5 mentions / 3d

Signal classification3 categories

Disclosure

360.0%

General

120.0%

Patch

120.0%

Referenced assets6 URLs

By indicator

Classification over time

Date	Total	Labels

2026-04-15	1	Disclosure1
2026-04-16	3	Disclosure2General1
2026-04-17	1	Patch1

Full discourse5 posts

WindowsForum@windowsforum174d
Patch
🪟 CVE-2026-6359: a Chrome use-after-free in Video… because even movies can be weaponized. Microsoft pushing the Edge patch means “downstream” still gets burned. Fix it. https://windowsforum.com/threads/cve-2026-6359-chrome-use-after-free-in-video-windows-edge-update-urgent.413794/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #UseAfterFree #ChromeSecurity #BrowserPatching #Cve20266359
Post summary
The post highlights a newly disclosed Chrome use‑after‑free vulnerability (CVE‑2026‑6359) and stresses that Microsoft’s Edge patch is the primary mitigation, urging users to update.
0000042
1.1K followersView on X
Infoflowcloud@infoflowcloud176d
General
🚨*CVE* CVE-2026-6359 Use after free in Video in Google Chrome on Windows prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to perform out of bounds … https://www.cve.org/CVERecord?id=CVE-2026-6359 ----- Traducción: CVE-2026-6359: us… http://infoflow.cloud`
Post summary
The tweet provides a brief notice of CVE‑2026‑6359, linking to its record, but offers no evidence of exploitation, PoC, patch, or debunking. The information is limited to a disclosure reference.
0000033
71 followersView on X
CVE@CVEnew176d
Disclosure
CVE-2026-6359 Use after free in Video in Google Chrome on Windows prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to perform out of bounds … https://www.cve.org/CVERecord?id=CVE-2026-6359
Post summary
The post announces a use‑after‑free vulnerability in Google Chrome’s Windows renderer, providing technical details but no PoC, exploit code, patch information, or evidence of active exploitation.
00000380
57.2K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds176d
Disclosure
CVE-2026-6359 Use After Free in Google Chrome Video Processing on Windows Prior ... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6359 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4
Post summary
An announcement of CVE-2026-6359, a use-after-free vulnerability in Google Chrome's video processing on Windows.
0000050
4.0K followersView on X
Kaitan ID Security@KaitanSecurity176d
Disclosure
⚠️ HIGH — CVE-2026-6359 Use after free in Video in Google Chrome on Windows prior to 147.0.7727.101 allowed a remote attacker who had compromis… CVSS 8.8 Full analysis → https://sec.kaitan.id/cves/CVE-2026-6359 #Google #CyberSecurity #InfoSec
Post summary
The tweet announces CVE-2026-6359 as a high‑severity use‑after‑free flaw in Google Chrome Video pre‑version 147.0.7727.101, but provides no PoC, exploit code, patch, or evidence of active exploitation.
000001
145 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	google	chrome	-	-	-

Explore more

Back to dashboard google CVEs chrome vulnerabilities

What researchers are saying

CVE-2026-6359

WindowsForum[verified]@windowsforumPatch

The post highlights a newly disclosed Chrome use‑after‑free vulnerability (CVE‑2026‑6359) and stresses that Microsoft’s Edge patch is the primary mitigation, urging users to update.

Kaitan ID Security[verified]@KaitanSecurityDisclosure

The tweet announces CVE-2026-6359 as a high‑severity use‑after‑free flaw in Google Chrome Video pre‑version 147.0.7727.101, but provides no PoC, exploit code, patch, or evidence of active exploitation.

Infoflowcloud@infoflowcloudGeneral

The tweet provides a brief notice of CVE‑2026‑6359, linking to its record, but offers no evidence of exploitation, PoC, patch, or debunking. The information is limited to a disclosure reference.

CVE@CVEnewDisclosure

The post announces a use‑after‑free vulnerability in Google Chrome’s Windows renderer, providing technical details but no PoC, exploit code, patch information, or evidence of active exploitation.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

An announcement of CVE-2026-6359, a use-after-free vulnerability in Google Chrome's video processing on Windows.