Cyber Posture

CVE-2026-7354

High

Published: 28 April 2026

Published
28 April 2026
Modified
30 April 2026
KEV Added
Patch
CVSS Score 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score 0.0003 7.3th percentile
Risk Priority 18 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2026-7354 is a high-severity Out-of-bounds Read (CWE-125) vulnerability in Google Chrome. Its CVSS base score is 8.8 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Drive-by Compromise (T1189); ranked at the 7.3th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified are NIST 800-53 SI-2 (Flaw Remediation) and SC-39 (Process Isolation).

Threat & Defense at a Glance

What attackers do: exploitation maps to Drive-by Compromise (T1189) and 2 other techniques. What defenders deploy: see the NIST 800-53 controls recommended below.
Threat & Defense Details

Mitigating Controls (NIST 800-53 r5)AI

prevent

Directly mitigates CVE-2026-7354 by requiring timely installation of the Chrome patch to version 147.0.7727.138 that remediates the out-of-bounds read/write vulnerability in Angle.

prevent

Addresses memory corruption aspects of the out-of-bounds read/write vulnerability through mechanisms like address space layout randomization and stack guards to hinder exploitation.

prevent

Mitigates impact of potential sandbox escape from the Angle flaw by enforcing process isolation in the browser renderer to contain exploitation within domains.

MITRE ATT&CK Enterprise TechniquesAI

T1189 Drive-by Compromise Initial Access
Adversaries may gain access to a system through a user visiting a website over the normal course of browsing.
T1203 Exploitation for Client Execution Execution
Adversaries may exploit software vulnerabilities in client applications to execute code.
T1068 Exploitation for Privilege Escalation Privilege Escalation
Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.
Why these techniques?

The vulnerability is a memory corruption flaw in Chrome's graphics layer exploitable via a crafted HTML page, directly enabling drive-by compromise (T1189), client-side code execution (T1203), and sandbox escape for privilege escalation (T1068).

Confidence: HIGH · MITRE ATT&CK Enterprise v18.1

NVD Description

Out of bounds read and write in Angle in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

Deeper analysisAI

CVE-2026-7354 is an out-of-bounds read and write vulnerability (CWE-125, CWE-787) in the Angle graphics component within Google Chrome prior to version 147.0.7727.138. Angle serves as the OpenGL ES implementation layer in Chromium-based browsers, and this flaw was publicly disclosed on 2026-04-28 with a Chromium security severity rating of High and a CVSS v3.1 base score of 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).

A remote attacker can exploit this vulnerability by enticing a user to interact with a crafted HTML page, potentially leading to a sandbox escape. The attack requires user interaction, such as visiting a malicious site, but no special privileges, enabling high-impact effects on confidentiality, integrity, and availability within the browser's sandboxed environment.

Google addressed this issue in the stable channel update for Chrome desktop, released as version 147.0.7727.138, as announced at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_28.html. Further technical details are documented in the Chromium issue tracker at https://issues.chromium.org/issues/498746519. Security practitioners should prioritize updating affected Chrome installations to mitigate exploitation risk.

Details

CWE(s)

Affected Products

google
chrome
≤ 147.0.7727.138

CVEs Like This One

CVE-2026-4459Same product: Apple Macos
CVE-2025-14766Same product: Apple Macos
CVE-2026-0899Same product: Apple Macos
CVE-2026-5873Same product: Apple Macos
CVE-2026-4440Same product: Apple Macos
CVE-2026-3920Same product: Apple Macos
CVE-2026-3062Same product: Apple Macos
CVE-2026-3916Same product: Apple Macos
CVE-2026-4439Same product: Apple Macos
CVE-2026-4462Same product: Apple Macos

References