CVE-2026-6360Disclosure(google / chrome)

LOWCVSS 8.8 · HIGH

Signal is active with 4 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Use after free in FileSystem in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High)

google CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_15.html

Other references

https://issues.chromium.org/issues/497880137

Weakness type (CWE)

CWE-416

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

chrome

Threat summary

5 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 4 signals
Disclosure: 5 classified signals
Peaked at 4 mentions on most recent observed day (2026-04-16)
5 total mentions across 2 days

Affected systems

Vendors

google

Products

chrome

Deep dive

Activity timeline5 mentions / 2d

Signal classification1 categories

Disclosure

5100.0%

Referenced assets5 URLs

By indicator

Classification over time

Date	Total	Labels

2026-04-15	1	Disclosure1
2026-04-16	4	Disclosure4

Full discourse5 posts

VulDB 🛡@vuldb175d
Disclosure
A severe vulnerability was disclosed for Google Chrome (CVE-2026-6360) https://vuldb.com/vuln/357798
Post summary
A severe vulnerability (CVE-2026-6360) for Google Chrome has been disclosed and linked to a vulnerability database entry, but no technical, exploit, or patch details are provided.
0101094
2.1K followersView on X
Infoflowcloud@infoflowcloud175d
Disclosure
🚨*CVE* CVE-2026-6360 Use after free in FileSystem in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chrom… https://www.cve.org/CVERecord?id=CVE-2026-6360 ----- Traducción: CVE-2026-6360 Uso… http://infoflow.cloud`
Post summary
The text describes CVE‑2026‑6360 as a use‑after‑free flaw in Chrome that could be exploited via crafted HTML, but it provides no PoC, exploit code, evidence of active exploitation, or patch information.
0000028
71 followersView on X
CVE@CVEnew175d
Disclosure
CVE-2026-6360 Use after free in FileSystem in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chrom… https://www.cve.org/CVERecord?id=CVE-2026-6360
Post summary
The text announces CVE-2026-6360, a use‑after‑free flaw in Google Chrome that could allow remote object corruption via crafted HTML, but provides no PoC, exploit, active exploitation, or patch details.
00000130
57.2K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds176d
Disclosure
CVE-2026-6360 Use After Free in FileSystem in Google Chrome Prior to 147.0.7727.101 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6360
Post summary
This entry announces CVE-2026-6360 as a use‑after‑free flaw in Chrome’s FileSystem API affecting versions earlier than 147.0.7727.101, without providing PoC, exploit, or patch details.
0000044
4.0K followersView on X
Kaitan ID Security@KaitanSecurity176d
Disclosure
⚠️ HIGH — CVE-2026-6360 Use after free in FileSystem in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially exploit … CVSS 8.8 Full analysis → https://sec.kaitan.id/cves/CVE-2026-6360 #Google #CyberSecurity #InfoSec
Post summary
The post announces a high‑severity use‑after‑free vulnerability in Google Chrome (CVE‑2026‑6360) with a CVSS score of 8.8, providing a link to a detailed analysis but no PoC, exploit, patch, or evidence of active exploitation.
000001
145 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	google	chrome	-	-	-

Explore more

Back to dashboard google CVEs chrome vulnerabilities

What researchers are saying

CVE-2026-6360

Kaitan ID Security[verified]@KaitanSecurityDisclosure

The post announces a high‑severity use‑after‑free vulnerability in Google Chrome (CVE‑2026‑6360) with a CVSS score of 8.8, providing a link to a detailed analysis but no PoC, exploit, patch, or evidence of active exploitation.

VulDB 🛡@vuldbDisclosure

A severe vulnerability (CVE-2026-6360) for Google Chrome has been disclosed and linked to a vulnerability database entry, but no technical, exploit, or patch details are provided.

Infoflowcloud@infoflowcloudDisclosure

The text describes CVE‑2026‑6360 as a use‑after‑free flaw in Chrome that could be exploited via crafted HTML, but it provides no PoC, exploit code, evidence of active exploitation, or patch information.

CVE@CVEnewDisclosure

The text announces CVE-2026-6360, a use‑after‑free flaw in Google Chrome that could allow remote object corruption via crafted HTML, but provides no PoC, exploit, active exploitation, or patch details.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

This entry announces CVE-2026-6360 as a use‑after‑free flaw in Chrome’s FileSystem API affecting versions earlier than 147.0.7727.101, without providing PoC, exploit, or patch details.