Cyber Posture

CVE-2026-6296

Critical

Published: 15 April 2026

Published
15 April 2026
Modified
17 April 2026
KEV Added
Patch
CVSS Score 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
EPSS Score 0.0003 7.8th percentile
Risk Priority 19 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2026-6296 is a critical-severity Heap-based Buffer Overflow (CWE-122) vulnerability in Google Chrome. Its CVSS base score is 9.6 (Critical).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Client Execution (T1203); ranked at the 7.8th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified are NIST 800-53 SI-2 (Flaw Remediation) and SC-39 (Process Isolation).

Threat & Defense at a Glance

What attackers do: exploitation maps to Exploitation for Client Execution (T1203) and 1 other technique. What defenders deploy: see the NIST 800-53 controls recommended below.
Threat & Defense Details

Mitigating Controls (NIST 800-53 r5)AI

prevent

Mandates timely identification, reporting, and patching of flaws like the heap buffer overflow in Chrome's ANGLE component to prevent exploitation.

prevent

Implements memory protections such as ASLR and DEP to mitigate unauthorized code execution from heap buffer overflows in browser components.

prevent

Enforces process isolation for browser renderer processes to limit the impact of sandbox escapes triggered by crafted HTML pages.

MITRE ATT&CK Enterprise TechniquesAI

T1203 Exploitation for Client Execution Execution
Adversaries may exploit software vulnerabilities in client applications to execute code.
T1068 Exploitation for Privilege Escalation Privilege Escalation
Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.
Why these techniques?

Heap buffer overflow in Chrome ANGLE enables RCE via malicious website (T1203 Exploitation for Client Execution) and sandbox escape for privilege escalation (T1068).

Confidence: HIGH · MITRE ATT&CK Enterprise v18.1

NVD Description

Heap buffer overflow in ANGLE in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

Deeper analysisAI

CVE-2026-6296 is a heap buffer overflow vulnerability (CWE-122) in the ANGLE graphics component within Google Chrome versions prior to 147.0.7727.101. ANGLE serves as an implementation of OpenGL ES on Windows and other platforms in Chromium-based browsers. The issue carries a CVSS v3.1 base score of 9.6 (AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) and is classified as Critical by Chromium security standards.

A remote attacker can exploit this vulnerability by tricking a user into visiting a malicious website containing a crafted HTML page. The heap buffer overflow enables potential sandbox escape, allowing the attacker to bypass Chrome's security boundaries. Successful exploitation requires user interaction but no privileges, with low attack complexity over the network, leading to high impacts on confidentiality, integrity, and availability due to the changed scope.

Mitigation is available in Google Chrome version 147.0.7727.101 and later, as detailed in the stable channel update announced on the Chrome Releases blog at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_15.html. Additional technical details are provided in the Chromium issue tracker at https://issues.chromium.org/issues/490170083. Security practitioners should prioritize updating affected browsers to patch this critical flaw.

Details

CWE(s)

Affected Products

google
chrome
≤ 147.0.7727.101

CVEs Like This One

CVE-2026-7353Same product: Apple Macos
CVE-2026-5272Same product: Apple Macos
CVE-2025-8879Same product: Apple Macos
CVE-2026-7339Same product: Apple Macos
CVE-2026-3915Same product: Apple Macos
CVE-2026-4448Same product: Apple Macos
CVE-2026-5275Same product: Apple Macos
CVE-2026-5858Same product: Apple Macos
CVE-2026-4463Same product: Apple Macos
CVE-2026-6306Same product: Apple Macos

References