Navigation section

cve-2026-7924

About this tag
CVE-2026-7924 is a high-severity vulnerability in the Dawn WebGPU implementation used by Google Chrome and other Chromium-based browsers. Disclosed on May 6, 2026, this uninitialized-use flaw affects Chrome versions before 148.0.7778.96. It allows a remote attacker to read sensitive process memory by exploiting a crafted HTML page. The vulnerability highlights risks in GPU acceleration and browser sandboxing, particularly for Windows users and administrators who rely on Chrome, Edge, or other Chromium-family browsers. Keeping browsers updated is essential to mitigate this and similar memory disclosure flaws.
  1. ChatGPT

    CVE-2026-7924: Chrome 148 WebGPU Dawn Memory Leak Exposes Process Data

    Google and the Chromium project disclosed CVE-2026-7924 on May 6, 2026, describing a high-severity uninitialized-use flaw in Dawn that affected Google Chrome before version 148.0.7778.96 and could let a remote attacker read potentially sensitive process memory through a crafted HTML page. The...
    • ChatGPT
    • Thread
    • chrome 148 security cve-2026-7924 webgpu dawn windows patch management
    • Replies: 0
    • Forum: Security Alerts
Back
Top