CVE-2026-7357 — Use After Free in Google Chrome

Vendor	Product	Version range	Fixed in
google	chrome	< 147.0.7727.138	147.0.7727.138
google	chrome	>= 147.0.7727.138 < 147.0.7727.138	147.0.7727.138
google	chrome_desktop	—	—

GHSA

GHSA-q2vm-c2rh-9gwx: Use after free in GPU in Google Chrome prior to 147

ghsa_unreviewed·2026-04-29

CVE-2026-7357 [HIGH] CWE-416 GHSA-q2vm-c2rh-9gwx: Use after free in GPU in Google Chrome prior to 147 Use after free in GPU in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Red Hat

chromium-browser: Use after free in GPU

vendor_redhat·2026-04-28·CVSS 8.2

CVE-2026-7357 [HIGH] CWE-825 chromium-browser: Use after free in GPU chromium-browser: Use after free in GPU An use after free flaw was found in the GPU component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=497047552 Statement: Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.

Chrome

Stable Channel Update for Desktop: CVE-2026-7357

vendor_chrome·2026-04-28

CVE-2026-7357 [HIGH] Stable Channel Update for Desktop: CVE-2026-7357 Stable Channel Update for Desktop CVE-2026-7357: Use after free in GPU. Reported by Google on 2026-03-27 [TBD][ 497769116 ] High CVE-2026-7356: Use after free in Navigation Reported by Google on 2026-03-30 [TBD][ 498746519 ] High CVE-2026-7354: Out of bounds read and write in Angle Severity: high

CVE-2026-7357: Use after free in GPU in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially exploit heap…

Affected