![Wanted: Suspect for Homicide in the 12th District [VIDEO]](https://thephillypi.com/wp-content/uploads/2026/03/1774941501_Wanted-Suspect-for-Homicide-in-the-12th-District-VIDEO-330x220.jpg "Wanted: Suspect for Homicide in the 12th District [VIDEO]")
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw in Google Dawn to its Known Exploited Vulnerabilities catalog.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a flaw in Google Dawn, tracked as CVE-2026-5281 (CVSS score of 8.8), to its Known Exploited Vulnerabilities (KEV) catalog.
The flaw is a use after free in the Dawn component in Google Chrome prior to 146.0.7680.178. Google Dawn is the WebGPU component used for graphics processing. A remote attacker who had compromised the renderer process could exploit the flaw to execute arbitrary code via a crafted HTML page.
According to CISA, this vulnerability could affect multiple Chromium-based products including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
This week, Google released Chrome updates fixing 21 vulnerabilities, including a new actively exploited zero-day tracked as CVE-2026-5281.
EXPLORE MORE
Strategic Skies and Steel: Chile Bolsters National Defense with Major New Security Agreements
In a landmark week for South American security, Chile has solidified its…
Missing Person Saniyah Mumford from the 14th District Has Been Located
The Philadelphia Police Department is seeking the public’s assistance in locating missing…
The Mach 2 Ghost: Why We Can’t Let Go of ‘After Burner Climax’
I found myself standing in a dimly lit corner of a suburban…
It’s a mystery … alleged unpatched Telegram zero-day allows device takeover, but Telegram denies
A critical Telegram flaw could allow zero-click remote code execution on devices,…
The Bibi Files: A Cinematic Dissection of Power, Privilege, and Prosecution
The documentary The Bibi Files, directed by Alexis Bloom and produced by…
The ‘Invisible’ Jammers: New EA-37B Jets Arrive in UK on Their Way to the Middle East
The U.S. Air Force just sent its newest, high-tech "secret weapons" across…
Due to ongoing exploitation, the company urges users to update their browsers immediately to reduce the risk of attacks.
“Google is aware that an exploit for CVE-2026-5281 exists in the wild.” reads the advisory.
A use-after-free (UAF) bug is a type of memory error where a program continues to use a piece of memory after it has already been freed (released).
Attackers can exploit use-after-free bugs to crash applications, execute malicious code, or take control of a system. Google fixed the Chrome zero-day and urges users to update to version 146.0.7680.177/178 (Windows/macOS) or 146.0.7680.177 (Linux).
As usual, Google did not reveal technical details of the attacks exploiting this flaw or the type of attackers involved, to give users time to update and prevent others from exploiting it.
CVE-2026-5281 is the fourth Chrome zero-day exploited in attacks in 2026.
According to Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities, FCEB agencies have to address the identified vulnerabilities by the due date to protect their networks against attacks exploiting the flaws in the catalog.
Experts also recommend that private organizations review the Catalog and address the vulnerabilities in their infrastructure.
CISA orders federal agencies to fix the vulnerability by April 15, 2026.
