New Chrome Zero-Day CVE-2026-5281 Under Active Exploitation — Patch Released

Google released Chrome security updates addressing 21 vulnerabilities, including a zero-day (CVE-2026-5281) actively exploited in the wild.

• •CVE-2026-5281 is a use-after-free bug in Dawn, Chrome's open-source WebGPU implementation, rated high-severity
• •The flaw allows a remote attacker who compromised the renderer process to execute arbitrary code via a crafted HTML page
• •Google has not disclosed exploitation details to prevent other threat actors from joining the attack campaign
• •This is the fourth actively weaponized Chrome zero-day patched by Google since the start of 2026
• •Users should update to Chrome 146.0.7680.177/178 on Windows/macOS and 146.0.7680.177 on Linux

This summary was automatically generated by AI based on the original article and may not be fully accurate.