CISA and others highlight active exploitation of CVE-2026-5281 in Google Dawn, described as a Chrome GPU remote to elevation of privilege issue. The repeated alerts emphasize rapid patching for browser zero-days.
0-Day Alert: Google Chrome GPU Remote to Elevation of Privilege exploit in the wild
CVE-2026-5281: Dawn Server Use-after-free due to improper clearing of callbacks upon DeviceInfo object destruction
We added Google Dawn use-after-free vulnerability CVE-2026-5281 to our Known Exploited Vulnerabilities Catalog.
Google has fixed the fourth Chrome vulnerability exploited in zero-day attacks since the start of the year.
This finding is one of many signals tracked across Cyber Security. The live feed updates every few hours with new expert voices, debates, and emerging ideas.
← Back to Cyber Security