Description
Use after free in GPU in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Published: 2026-04-28
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A use‑after‑free flaw in Chrome’s GPU code lets a malicious renderer process corrupt heap memory when it parses a specially crafted web page. The vulnerability may enable heap corruption via crafted HTML, as described in the CVE. The flaw corresponds to CWE‑416 and CWE‑825, involving improper use of freed memory after the owning object has been released and other mismanagement of internal memory structures.

Affected Systems

The flaw affects Google Chrome versions older than 147.0.7727.138 across all desktop platforms. Versions prior to this release are vulnerable; newer releases include the repair.

Risk and Exploitability

The CVSS score is 7.5, the EPSS score is < 1%, and it is not listed in CISA’s KEV catalog. The attack requires an attacker to have already compromised the renderer process, which is typically achieved via a malicious web page; thus the likely vector is remote through crafted content. Given the potential for heap corruption, the risk remains significant until a patched version is deployed.

Generated by OpenCVE AI on April 30, 2026 at 04:06 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade Chrome to 147.0.7727.138 or later
  • Disable GPU acceleration or hardware rendering as a temporary mitigation
  • Ensure Chrome automatically receives security updates
  • Monitor for anomalous HTML rendering behaviours and apply web‑filtering controls

Generated by OpenCVE AI on April 30, 2026 at 04:06 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DSA Debian DSA DSA-6239-1 chromium security update
History

Thu, 30 Apr 2026 16:45:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple macos
Linux
Linux linux Kernel
Microsoft
Microsoft windows
CPEs cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
Vendors & Products Apple
Apple macos
Linux
Linux linux Kernel
Microsoft
Microsoft windows

Wed, 29 Apr 2026 21:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}

 cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H'}

Wed, 29 Apr 2026 19:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 8.2, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H'}

 ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}

Wed, 29 Apr 2026 12:15:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free in GPU Rendering Engine Allowing Heap Corruption via Crafted HTML chromium-browser: Use after free in GPU
Weaknesses CWE-825
References
Metrics threat_severity

None

 cvssV3_1

{'score': 8.2, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H'}

threat_severity

Important

Wed, 29 Apr 2026 01:30:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free in GPU Rendering Engine Allowing Heap Corruption via Crafted HTML

Wed, 29 Apr 2026 01:00:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome

Tue, 28 Apr 2026 23:00:00 +0000

Type Values Removed Values Added
Description Use after free in GPU in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Weaknesses CWE-416
References

Subscriptions

Apple Macos
Google Chrome
Linux Linux Kernel
Microsoft Windows
cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published:

Updated: 2026-04-30T03:55:41.936Z

Reserved: 2026-04-28T20:02:46.817Z

Link: CVE-2026-7357

cve-icon Vulnrichment

Updated: 2026-04-29T18:24:38.839Z

cve-icon NVD

Status : Analyzed

Published: 2026-04-28T23:16:23.260

Modified: 2026-04-30T16:37:58.563

Link: CVE-2026-7357

cve-icon Redhat

Severity : Important

Publid Date: 2026-04-28T00:00:00Z

Links: CVE-2026-7357 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-04-30T04:15:26Z

Weaknesses