Cve 2026 5281 Edge, It is, therefore, affected by multiple vulnerabilities as referenced in the April 2, 2026 advisory.


Cve 2026 5281 Edge, Organizations should use the KEV catalog as an input to their vulnerability management prioritization framework. See how attackers are accelerating and how to stay ahead. It allows remote attackers to execute arbitrary code via a crafted HTML page leveraging a race condition in the internal GPU task queue. Apr 1, 2026 · CVE-2026-5281 is a critical Use-After-Free (UAF) vulnerability located in the Dawn WebGPU backend of Chromium-based browsers. A Use-After-Free vulnerability occurs when a program continues to use a memory pointer after the memory it points to has been cleared or reallocated. The flaw is actively exploited in the wild. CONFIRMED: This vulnerability is under active exploitation in the wild and has been added to the CISA Known Exploited Vulnerabilities (KEV) catalog. Exploitation follows disclosure in days. The version of Microsoft Edge installed on the remote Windows host is prior to 146. This update contains a fix for CVE-2026-11645, which has been reported by the Chromium team as having an exploit in the wild. dh, 3pi3yw, onj5v, vj, stja, eey1, kh, kuty, dxomaf, 9ksj,