Chrome Video Bug: Renderer Compromise Leads to High-Severity RCE

The National Vulnerability Database has disclosed a critical use-after-free vulnerability, CVE-2026-6359, impacting Google Chrome on Windows. This flaw, rated with a high severity CVSS score of 8.8, specifically affects versions prior to 147.0.7727.101. It’s a classic memory corruption issue, categorized under CWE-416, which is always a red flag for exploit developers.

According to the National Vulnerability Database, an attacker who successfully compromises the renderer process can leverage this vulnerability to achieve out-of-bounds memory access. This is done by tricking a user into visiting a specially crafted HTML page. The implications are severe; out-of-bounds memory access often paves the way for arbitrary code execution, allowing an attacker to run malicious code on the victim’s system with the privileges of the Chrome process. This kind of bug is a prime target for initial access and privilege escalation within browser sandboxes.