CVE-2026-4453 — External Control of Assumed-Immutable Web Parameter in Google Chrome

CWE-472 — External Control of Assumed-Immutable Web Parameter CWE-190 — Integer Overflow or Wraparound9 documents9 sources

Severity

4.3MEDIUMNVD

EPSS

0.0%

top 91.78%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Google Chrome Chromium

Timeline

PublishedMar 20

Description

Integer overflow in Dawn in Google Chrome on Mac prior to 146.0.7680.153 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages3 packages

▶CVEListV5google/chrome146.0.7680.153 — 146.0.7680.153

▶NVDgoogle/chrome< 146.0.7680.153

▶Debianchromium/chromium< 146.0.7680.153-1~deb12u1+2

🔴Vulnerability Details

CVEList

CVE-2026-4453: Integer overflow in Dawn in Google Chrome on Mac prior to 146↗2026-03-20

▶

OSV

CVE-2026-4453: Integer overflow in Dawn in Google Chrome on Mac prior to 146↗2026-03-20

▶

GHSA

GHSA-x582-7573-343x: Integer overflow in Dawn in Google Chrome on Mac prior to 146↗2026-03-20

▶

📋Vendor Advisories

Red Hat

chromium-browser: Integer overflow in Dawn↗2026-03-18

▶

Chrome

Stable Channel Update for Desktop: CVE-2026-4452↗2026-03-18

▶

Microsoft

Chromium: CVE-2026-4453 Integer overflow in Dawn↗2026-03-10

▶

Debian

CVE-2026-4453: chromium - Integer overflow in Dawn in Google Chrome on Mac prior to 146.0.7680.153 allowed...↗2026

▶

🕵️Threat Intelligence

Wiz

CVE-2026-4453 Impact, Exploitability, and Mitigation Steps | Wiz↗

▶