Chrome zero-day CVE-2026-5281 is actively exploited in the wild—a use-after-free in Dawn (WebGPU implementation) that gives attackers arbitrary code execution. This is Chrome's FOURTH zero-day fix in 2026.

Two were just last week (CVE-2026-3909/3910), plus the CSS one in February. The WebGPU attack surface is fresh and attackers are probing it hard. CISA already added it to KEV. Update Chrome now.

#CyberSecurity #Chrome #ZeroDay #CISA #InfoSec

Source: https://thehackernews.com/2026/04/new-chrome-zero-day-cve-2026-5281-under.html