Webaudio — CraftedSignal Threat Feed

Google Chrome WebAudio Heap Buffer Overflow Vulnerability (CVE-2026-4673)

hello@craftedsignal.io — Wed, 25 Mar 2026 12:00:00 +0000

CVE-2026-4673 is a heap buffer overflow vulnerability affecting the WebAudio component of Google Chrome. The vulnerability exists in versions prior to 146.0.7680.165. A remote attacker could exploit this vulnerability by crafting a malicious HTML page designed to trigger an out-of-bounds memory write. The Chromium security team has rated this vulnerability as High severity. Successful exploitation could allow an attacker to potentially execute arbitrary code within the context of the Chrome…

Google Chrome WebAudio Out-of-Bounds Read Vulnerability (CVE-2026-4677)

hello@craftedsignal.io — Tue, 24 Mar 2026 01:17:03 +0000

CVE-2026-4677 describes an out-of-bounds memory read vulnerability in the WebAudio component of Google Chrome. Successful exploitation of this vulnerability allows a remote attacker to potentially read sensitive information from the browser’s memory. The vulnerability exists in Google Chrome versions prior to 146.0.7680.165. The attack involves crafting a malicious HTML page that, when opened in a vulnerable version of Chrome, triggers the out-of-bounds read in the WebAudio processing. The…