CVE-2026-6304
Published: 15 April 2026
Summary
CVE-2026-6304 is a high-severity Use After Free (CWE-416) vulnerability in Google Chrome. Its CVSS base score is 8.3 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Privilege Escalation (T1068); ranked at the 16.1th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-16 (Memory Protection) and SI-2 (Flaw Remediation).
Deeper analysis
CVE-2026-6304 is a use-after-free vulnerability (CWE-416) in the Graphite font rendering component within Google Chrome versions prior to 147.0.7727.101. Graphite, a library used for complex script shaping, mishandles memory deallocation, leading to potential exploitation. The issue carries a CVSS v3.1 base score of 8.3 (AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) and is rated High severity by Chromium security.
A remote attacker who has already compromised the renderer process can exploit this vulnerability via a crafted HTML page to achieve a sandbox escape. Exploitation requires user interaction, such as visiting a malicious site, and involves high attack complexity, but no privileges. Successful exploitation grants elevated scope (S:C), enabling high-impact confidentiality, integrity, and availability violations beyond the sandbox.
Mitigation is addressed in the Google Chrome Stable Channel update for desktop, detailed at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_15.html, which patches affected versions up to 147.0.7727.101. Additional technical details are available in the Chromium issue tracker at https://issues.chromium.org/issues/496393742. Security practitioners should prioritize updating Chrome to the latest version.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2026-23050
Vulnerability details
Use after free in Graphite in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Use-after-free in Chrome renderer enables sandbox escape after renderer compromise, directly mapping to exploitation for privilege escalation (T1068) and client application exploitation for code execution (T1203).
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly remediates the use-after-free vulnerability in Graphite by requiring timely application of vendor patches to affected Chrome versions.
Implements memory safety mechanisms like ASLR, DEP, and stack protections that mitigate exploitation of use-after-free errors in the renderer process.
Enforces strong process isolation via sandboxing to contain renderer compromises and limit sandbox escape impacts from crafted HTML exploitation.