CVE-2026-6310

CVE-2026-6310 is a use-after-free vulnerability in Google Chrome's Dawn graphics library affecting versions prior to 147.0.7727.101. This flaw allows a remote attacker who has already compromised the renderer process to potentially escape the sandbox and gain unauthorized system access through a crafted HTML page. The vulnerability carries a Chromium security severity rating of High. The attack requires network access and user interaction, with high attack complexity, but poses significant risk across confidentiality, integrity, and availability. The CVSS score of 8.3 reflects the serious potential impact, though successful exploitation requires the attacker to have already achieved renderer process compromise as a prerequisite. The high CVSS rating indicates this is a critical privilege escalation vector for attackers seeking to break out of Chrome's security sandbox. There is currently no evidence of active exploitation in the wild, as indicated by the vulnerability's absence from CISA's Known Exploited Vulnerabilities catalog and its inactive Hot List status. The EPSS score of 0.00039 suggests this vulnerability ranks lower in likelihood of exploitation compared to most disclosed CVEs. However, the vulnerability should still be prioritized for patching given its high severity rating and the theoretical risk it poses in multi-stage attack scenarios.