cve 2026 7350

CVE-2026-7350 is a high-severity use-after-free vulnerability in the WebMIDI component of the Chromium browser engine. It was fixed in Chrome 147.0.7727.137/138 on April 28, 2026. The flaw could allow an attacker to escape Chrome's sandbox after compromising the renderer process, making it a significant security risk for Windows endpoints. Because Microsoft Edge is built on Chromium, this vulnerability also affects Windows fleets using Edge. The tag covers discussions about the technical details of the bug, its impact on browser security, and the importance of applying the patch promptly to mitigate sandbox escape risks on Windows systems.