CVE-2026-5281
HIGH KEVGoogle Chrome < 146.0.7680.178 - Use-After-Free in Dawn
Title source: llmExploitation Summary
CVE-2026-5281 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added April 1, 2026. EIP tracks 4 public exploits from researchers including Hex0rc1st, TheMalwareGuardian, anansi2safe.
AI-analyzed exploit summary The repository contains a functional PoC for CVE-2026-5281, a Chrome Dawn WebGPU Use-After-Free vulnerability. It includes a version detector, vulnerability checker, and UAF trigger, demonstrating the exploit chain with detailed technical implementation.
Description
Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
Exploits (4)
The repository contains a functional PoC for CVE-2026-5281, a Chrome Dawn WebGPU Use-After-Free vulnerability. It includes a version detector, vulnerability checker, and UAF trigger, demonstrating the exploit chain with detailed technical implementation.
This repository contains a functional exploit PoC for CVE-2026-5281, a use-after-free vulnerability in Chrome's WebGPU implementation. The exploit leverages improper cleanup of device callbacks in the Dawn wire server, leading to memory corruption when callbacks reference freed memory.
This repository contains a functional exploit PoC for CVE-2026-5281, a WebGPU Use-After-Free (UAF) vulnerability in Chrome's Dawn backend. The exploit leverages buffer lifecycle mismanagement to trigger a UAF condition, leading to DoS or potential RCE.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H