CVE-2026-7363 — Vulnerability intelligence

google — chrome

Published: 2026-04-28T23:16:23.773

CVSS

8.8

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

Use after free in Canvas in Google Chrome on Linux, ChromeOS prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Critical)

Sources

• CVE-2026-7363
• Vendor Advisory
• Permissions Required