{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-7357", "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", "state": "PUBLISHED", "assignerShortName": "Chrome", "dateReserved": "2026-04-28T20:02:46.817Z", "datePublished": "2026-04-28T22:35:57.502Z", "dateUpdated": "2026-04-28T22:35:57.502Z"}, "containers": {"cna": {"affected": [{"vendor": "Google", "product": "Chrome", "versions": [{"version": "147.0.7727.138", "status": "affected", "lessThan": "147.0.7727.138", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "value": "Use after free in GPU in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Use after free", "cweId": "CWE-416"}]}], "providerMetadata": {"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", "shortName": "Chrome", "dateUpdated": "2026-04-28T22:35:57.502Z"}, "references": [{"url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_28.html"}, {"url": "https://issues.chromium.org/issues/497047552"}]}}}

{}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "Use after free in GPU in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"}], "id": "CVE-2026-7357", "lastModified": "2026-04-28T23:16:23.260", "metrics": {}, "published": "2026-04-28T23:16:23.260", "references": [{"source": "chrome-cve-admin@google.com", "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_28.html"}, {"source": "chrome-cve-admin@google.com", "url": "https://issues.chromium.org/issues/497047552"}], "sourceIdentifier": "chrome-cve-admin@google.com", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-416"}], "source": "chrome-cve-admin@google.com", "type": "Primary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,147.0.7727.138)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Chrome", "source": "cna", "vendor": "Google"}, "product": "chrome", "vendor": "google"}], "analysis": {"en": {"generated_at": "2026-04-29T01:09:33.333378+00:00", "value": {"mitigation_remediation": ["Upgrade Chrome to 147.0.7727.138 or later", "Disable GPU acceleration or hardware rendering as a temporary mitigation", "Ensure Chrome automatically receives security updates", "Monitor for anomalous HTML rendering behaviours and apply web\u2011filtering controls"], "summary": {"action": "Immediate Patch", "impact": "Heap corruption via crafted HTML page"}, "threat_synthesis": {"affected_systems": "The flaw affects Google Chrome versions older than 147.0.7727.138 across all desktop platforms. Versions prior to this release are vulnerable; newer releases include the repair.", "description_and_impact": "A use\u2011after\u2011free flaw in Chrome\u2019s GPU code lets a malicious renderer process corrupt heap memory when it parses a specially crafted web page. The vulnerability can allow an attacker with control over the renderer to cause undefined behaviour that may lead to arbitrarily memory corruption, potentially enabling code execution or denial of service. The weakness corresponds to CWE\u2011416, involving improper use of freed memory after the owning object has been released.", "risk_and_exploitability": "The issue has a high severity assessment, but no EPSS score is available and it is not listed in CISA\u2019s KEV catalog. The attack requires an attacker to have already compromised the renderer process, which is typically achieved via a malicious web page; thus the likely vector is remote through crafted content. Given the potential for arbitrary heap corruption, the risk remains significant until a patched version is deployed."}}}}, "created": "2026-04-29T00:45:25.882556+00:00", "title": "Use\u2011After\u2011Free in GPU Rendering Engine Allowing Heap Corruption via Crafted HTML", "updated": "2026-04-29T01:15:44.711079+00:00", "vendors": ["google", "google$PRODUCT$chrome"]}