← Back to Vulnerability Reports CVE Intelligence

CVE-2026-5281

Google Dawn•HIGH · CVSS 8.8• In the wild In CISA KEV

What is CVE-2026-5281?

Google Dawn contains an use-after-free vulnerability that could allow a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. This vulnerability could affect multiple Chromium-based products including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

CVSS8.8 NVD 3.1
SeverityHIGH
Exploitation In the wild In CISA KEV
Triage statusActive Exploit
ActionPatch immediately
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA Known Exploited Vulnerability

Google Dawn Use-After-Free Vulnerability

Added to KEV2026-04-01
Federal patch deadline2026-04-15
Known ransomware useUnknown

Affected product

Google Dawn

References

Coverage on defend.network

🤖 This CVE page is generated by defend.network from NVD, CISA KEV, EPSS, and our verified daily briefings. Severity and exploitation data come from official sources; always verify remediation steps against the official vendor advisory before acting in production.

Get Critical CVE Alerts

Subscribe free and hear about actively exploited CVEs like this one first.