https://feed.craftedsignal.io/tags/cve-2026-4678/Trending threats, MITRE ATT&CK coverage, and detection metadata — refreshed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioTue, 24 Mar 2026 01:17:03 +0000https://feed.craftedsignal.io/briefs/2026-03-chrome-webgpu-uaf/Tue, 24 Mar 2026 01:17:03 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-03-chrome-webgpu-uaf/A use-after-free vulnerability in Google Chrome's WebGPU component (CVE-2026-4678) allows a remote attacker to execute arbitrary code within a sandbox by crafting a malicious HTML page, affecting Chrome versions prior to 146.0.7680.165.<p>CVE-2026-4678 is a use-after-free vulnerability impacting Google Chrome versions earlier than 146.0.7680.165. The vulnerability resides within the WebGPU component, a modern graphics API. An unauthenticated, remote attacker can exploit this flaw by enticing a user to open a specially crafted HTML page. Successful exploitation allows the attacker to execute arbitrary code inside the Chrome sandbox. The Chromium project rates this as a High severity issue due to the potential for arbitrary code…</p> highadvisorycve-2026-4678use-after-freechromewebgpu