CVE-2026-5281: Google Dawn

What is CVE-2026-5281?

Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

CVSS8.8 NVD 3.1

SeverityHIGH

Exploitation In the wild In CISA KEV

EPSS5% · P91

Triage statusActive Exploit

ActionPatch immediately

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD published2026-04-01

NVD last modified2026-07-24

Timeline

2026-04-01Published to the U.S. National Vulnerability Database (NVD)
2026-04-01Added to the CISA Known Exploited Vulnerabilities (KEV) catalog
2026-04-02First covered in a defend.network daily briefing
2026-04-15CISA federal remediation deadline (BOD 22-01)
2026-07-24NVD record last updated

CISA Known Exploited Vulnerability

Google Dawn Use-After-Free Vulnerability

Added to KEV2026-04-01

Federal patch deadline2026-04-15

Known ransomware useUnknown

Affected product

Google Dawn

NVD also lists CPE entries for: Google Chrome, Apple Macos, Linux Kernel, Microsoft Windows

References

Referenced in our briefings & reports

Chrome & TrueConf zero-days exploited; widespread malware campaigns (2026-04-02)

Browse all tracked CVEs in the defend.network CVE database →

🤖 This CVE page is generated by defend.network from NVD, CISA KEV, EPSS, and our verified daily briefings. Severity and exploitation data come from official sources; always verify remediation steps against the official vendor advisory before acting in production.