Latest Chrome zero-day news

Fourth Chrome zero-day of 2026 targets the Dawn WebGPU layer. CVE-2026-5281 is a use-after-free exploited in the wild as a likely sandbox escape primitive. CISA set an April 15 federal deadline. Same researcher reported three other Dawn/WebGL bugs in two …

An unauthenticated file upload in the WordPress Pix for WooCommerce plugin scored CVSS 9.8, and OneUptime collected its fourth critical vulnerability in two weeks. The March 14 digest covers 10 high-severity flaws including two Chrome zero-days.

Two actively exploited Chrome zero-days in the Skia graphics engine and V8 JavaScript engine prompted an emergency Google patch within 48 hours. These are the second and third Chrome zero-days of 2026. Update to 146.0.7680.75 now.