CVE-2026-4677

CVE-2026-4677

Vendor Google
Product Chrome
Weakness CWE-125
Published March 24, 2026
Last update March 25, 2026
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Inappropriate implementation in WebAudio in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)

Key dates

02Disclosure timeline

March 24, 2026 CVE published
March 25, 2026 Record updated