Google Dawn Use-After-Free Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 01/04/2026. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| chrome | < 146.0.7680.177 | 146.0.7680.177 |
Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free