wid-sec-w-2026-0837 · Published 2026-03-23 · View on BSI CERT-Bund ↗

Google Chrome/Microsoft Edge: Multiple Vulnerabilities

CVSS 8.8 HIGH

Risk Summary

Use after free in Dawn in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVEs (8)

CVE-2026-4673 CVE-2026-4674 CVE-2026-4675 CVE-2026-4676 CVE-2026-4677 CVE-2026-4678 CVE-2026-4679 CVE-2026-4680

Affected Vendors

Debian Fedora Google Microsoft SUSE

Affected Products (4)

Google · Chrome <146.0.7680.164

Google · Chrome 146.0.7680.164

Microsoft · Edge <146.0.3856.84

Microsoft · Edge 146.0.3856.84

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more