Description
Use after free in WebRTC in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Published: 2026-04-28
Score: 8.8 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A use‑after‑free bug exists in the WebRTC implementation of Google Chrome versions prior to 147.0.7727.138. When a crafted HTML page is loaded, the flaw causes the browser to access freed memory inside a sandboxed context, enabling a remote attacker to run arbitrary code with sandboxed privileges. The weakness is classified as CWE‑416 and CWE‑825, and the Chromium project rates the severity as high.

Affected Systems

Google Chrome browsers running any version earlier than 147.0.7727.138 are affected. This includes all stable channel releases that precede the security patch supplied in April 2026.

Risk and Exploitability

The CVSS score of 8.8 indicates a high‑severity flaw. No EPSS score is available and the vulnerability is not listed in the CISA KEV catalog, but the Chromium project has identified it as a high‑severity flaw. The likely attack vector is a malicious web page that a user visits or is prompted to open. Exploitation requires the victim to load the crafted page in a Chrome browser, after which arbitrary code can be executed inside the browser’s sandbox.

Generated by OpenCVE AI on April 29, 2026 at 14:27 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update Google Chrome to version 147.0.7727.138 or later.
  • Enable Chrome’s Safe Browsing and Site Isolation features to reduce the impact while no patch is available.
  • Stay alert to additional Chrome security releases and apply them promptly.

Generated by OpenCVE AI on April 29, 2026 at 14:27 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DSA Debian DSA DSA-6239-1 chromium security update
History

Thu, 30 Apr 2026 18:30:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple macos
Linux
Linux linux Kernel
Microsoft
Microsoft windows
CPEs cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
Vendors & Products Apple
Apple macos
Linux
Linux linux Kernel
Microsoft
Microsoft windows

Thu, 30 Apr 2026 05:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 29 Apr 2026 12:15:00 +0000

Type Values Removed Values Added
Title Use After Free in Chrome WebRTC Enabling Remote Code Execution via Crafted HTML chromium-browser: Use after free in WebRTC
Weaknesses CWE-825
References
Metrics threat_severity

None

 cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}

threat_severity

Important

Wed, 29 Apr 2026 02:15:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome

Wed, 29 Apr 2026 01:30:00 +0000

Type Values Removed Values Added
Title Use After Free in Chrome WebRTC Enabling Remote Code Execution via Crafted HTML

Tue, 28 Apr 2026 23:00:00 +0000

Type Values Removed Values Added
Description Use after free in WebRTC in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Weaknesses CWE-416
References

Subscriptions

Apple Macos
Google Chrome
Linux Linux Kernel
Microsoft Windows
cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published:

Updated: 2026-05-01T03:55:42.299Z

Reserved: 2026-04-28T20:02:33.914Z

Link: CVE-2026-7336

cve-icon Vulnrichment

Updated: 2026-04-29T12:44:05.675Z

cve-icon NVD

Status : Analyzed

Published: 2026-04-28T23:16:21.167

Modified: 2026-04-30T18:28:59.047

Link: CVE-2026-7336

cve-icon Redhat

Severity : Important

Publid Date: 2026-04-28T00:00:00Z

Links: CVE-2026-7336 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-04-29T14:30:13Z

Weaknesses