CVE-2026-5280 in Chrome

Sumário (Inglês)

Use after free in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Responsável

Chrome

Reservar

31/03/2026

Divulgação

01/04/2026

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
354596	Google Chrome WebCodecs Excesso de tampão	416	Não definido	Correção oficial	CVE-2026-5280

Fontes

• MITRE
• NVD
• CVE Details