CVE-2026-5277 in Google Chrome

Summary

Integer overflow in ANGLE in Google Chrome on Windows prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)

Responsible

Chrome

Reservation

03/31/2026

Disclosure

04/01/2026

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
354592	Google Chrome ANGLE external control of assumed-immutable web parameter	472	Not defined	Official fix	CVE-2026-5277