CVE-2026-4458 - Vulnerability Analysis

Overview

Google Chrome < 146.0.7680.153 contains a use after free vulnerability in Extensions, caused by heap corruption via crafted Chrome Extension, letting attackers exploit heap corruption after convincing users to install malicious extensions.

Severity & Score

Impact

Attackers can exploit heap corruption to execute arbitrary code or crash the browser, potentially compromising user security.

Mitigation

Update to version 146.0.7680.153 or later.

References

• https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_18.html
• https://issues.chromium.org/issues/489619753

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 22, 2026

🟠 CVE-2026-4458 - High (8.8) Use after free in Extensions in Google Chrome prior to 146.0.7680.153 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High) 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-4458/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner