CVE-2026-4673

CVE-2026-4673 identifies a high-severity heap buffer overflow in Google Chrome's WebAudio component, affecting versions prior to 146.0.7680.165 on Apple, Google, Linux, and Microsoft platforms. Rated 8.8 High, this vulnerability enables a remote attacker to perform an out-of-bounds memory write via a crafted HTML page, leading to high impacts on confidentiality, integrity, and availability with low attack complexity. Although user interaction is required, the exploit vector is network-based. There is no evidence of active exploitation, nor is public exploit code available in common databases. However, the vulnerability has received some community discussion and media coverage related to security updates.