Use after free in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Wed, 01 Apr 2026 05:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Use after free in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) | |
| Weaknesses | CWE-416 | |
| References |
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: Chrome
Published:
Updated: 2026-04-01T04:41:32.335Z
Reserved: 2026-03-31T20:07:12.932Z
Link: CVE-2026-5280
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-04-01T05:16:01.310
Modified: 2026-04-01T05:16:01.310
Link: CVE-2026-5280
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses