¡¾Îó²îͨ¸æ¡¿Google Chrome Dawn Use-After-FreeÎó²î(CVE-2026-5281)

Ðû²¼Ê±¼ä 2026-04-02

Ò»¡¢Îó²î¸ÅÊö


Îó²îÃû³Æ

Google Chrome Dawn Use-After-FreeÎó²î

CVE   ID

CVE-2026-5281

Îó²îÀàÐÍ

ÄÚ´æÆÆËðÎó²î

·¢Ã÷ʱ¼ä

2026-4-2

Îó²îÆÀ·Ö

8.8

Îó²îÆ·¼¶

¸ßΣ

¹¥»÷ÏòÁ¿

ÍâµØ

ËùÐèȨÏÞ

ÎÞ

ʹÓÃÄѶÈ

µÍ

Óû§½»»¥

ÐèÒª

PoC/EXP

δ¹ûÕæ

ÔÚҰʹÓÃ

ÒÑ·¢Ã÷


Google Chrome ÊÇÓɹȸ迪·¢µÄ¿çÆ½Ì¨ÍøÒ³ä¯ÀÀÆ÷£¬£¬ £¬£¬£¬£¬ÒÔÆäËÙÂÊ¡¢Çå¾²ÐԺ;«Á·µÄ½çÃæ¶øÖøÃû¡£¡£¡£¡£¡£Ëü»ùÓÚ¿ªÔ´µÄChromiumÏîÄ¿£¬£¬ £¬£¬£¬£¬Ö§³ÖÏÖ´úÍøÒ³±ê×¼£¬£¬ £¬£¬£¬£¬¾ßÓÐǿʢµÄÀ©Õ¹ÐÔ¡£¡£¡£¡£¡£ChromeµÄɳÏäÊÖÒÕ¿ÉÒÔÏÞÖÆÍøÒ³ÖеĶñÒâ´úÂ룬£¬ £¬£¬£¬£¬ÔöÇ¿ä¯ÀÀÆ÷µÄÇå¾²ÐÔ¡£¡£¡£¡£¡£Ëü»¹ÌṩÁËͬ²½¹¦Ð§£¬£¬ £¬£¬£¬£¬ÔÊÐíÓû§ÔÚ¶à¸ö×°±¸¼äͬ²½ÊéÇ©¡¢ÀúÊ·¼Í¼µÈÊý¾Ý¡£¡£¡£¡£¡£±ðµÄ£¬£¬ £¬£¬£¬£¬Chrome°´ÆÚ¸üУ¬£¬ £¬£¬£¬£¬ÐÞ¸´ÒÑÖªÎó²î²¢ÔöÇ¿¹¦Ð§£¬£¬ £¬£¬£¬£¬ÊÇÈ«ÇòʹÓÃ×îÆÕ±éµÄä¯ÀÀÆ÷Ö®Ò»¡£¡£¡£¡£¡£


2026Äê4ÔÂ2ÈÕ£¬£¬ £¬£¬£¬£¬¼øºÚµ£±£ÍøÇå¾²Ó¦¼±ÏìÓ¦ÖÐÐÄ£¨VSRC£©¼à²âµ½Google Chrome Dawn Use-After-FreeÎó²î¡£¡£¡£¡£¡£¸ÃÎó²îÔ´ÓÚ³ÌÐòÔÚÊÍ·ÅÄÚ´æºóÈÔ¼ÌÐøÊ¹ÓÃÒÑʧЧָÕ룬£¬ £¬£¬£¬£¬µ¼ÖÂÄÚ´æ»á¼ûÒì³£¡£¡£¡£¡£¡£¹¥»÷ÕßÔÚÒÑÍ»ÆÆrenderer processɳÏäµÄÌõ¼þÏ£¬£¬ £¬£¬£¬£¬¿Éͨ¹ý½á¹¹¶ñÒâHTMLÒ³Ãæ´¥·¢¸ÃÎó²î£¬£¬ £¬£¬£¬£¬´Ó¶øÊµÏÖí§Òâ´úÂëÖ´ÐлòÍ»ÆÆÇå¾²½çÏß¡£¡£¡£¡£¡£¸ÃÎó²îÒѱ»È·ÈÏÔÚҰʹÓ㬣¬ £¬£¬£¬£¬Åú×¢Æä¾ß±¸½Ï¸ß¹¥»÷¼ÛÖµÓëÏÖʵÍþв¡£¡£¡£¡£¡£Ò»µ©±»ÀÖ³ÉʹÓ㬣¬ £¬£¬£¬£¬¿ÉÄܵ¼ÖÂÓû§Öն˱»ÍêÈ«¿ØÖÆ¡¢Ãô¸ÐÊý¾Ýй¶£¬£¬ £¬£¬£¬£¬ÉõÖÁ³ÉΪ¹¥»÷Ìø°å£¬£¬ £¬£¬£¬£¬½ø¶øÎ¥·´Êý¾ÝÇå¾²ÓëÒþ˽±£»£»£»£»£»£»¤Ïà¹ØºÏ¹æÒªÇ󣬣¬ £¬£¬£¬£¬¶ÔÆóÒµ¼°Ð¡ÎÒ˽¼ÒÓû§×é³ÉÑÏÖØÇ徲Σº¦¡£¡£¡£¡£¡£


¶þ¡¢Ó°Ïì¹æÄ£


Google Chrome(Windows/Mac) < 146.0.7680.177/178
Google Chrome(Linux) < 146.0.7680.177


Èý¡¢Çå¾²²½·¥


3.1 Éý¼¶°æ±¾


¹Ù·½ÒÑÐû²¼ÐÞ¸´²¹¶¡£¬£¬ £¬£¬£¬£¬ÒÔÐÞ¸´¸ÃÎó²î¡£¡£¡£¡£¡£
Google Chrome(Windows/Mac) >= 146.0.7680.177/178
Google Chrome(Linux) >= 146.0.7680.177


ÏÂÔØÁ´½Ó£ºhttps://www.google.com/intl/zh-CN/chrome/


3.2 ÔÝʱ²½·¥


ÔÝÎÞ¡£¡£¡£¡£¡£


3.3 ͨÓý¨Òé


? °´ÆÚ¸üÐÂϵͳ²¹¶¡£¬£¬ £¬£¬£¬£¬ïÔ̭ϵͳÎó²î£¬£¬ £¬£¬£¬£¬ÌáÉýЧÀÍÆ÷µÄÇå¾²ÐÔ¡£¡£¡£¡£¡£
ÔöǿϵͳºÍÍøÂçµÄ»á¼û¿ØÖÆ£¬£¬ £¬£¬£¬£¬Ð޸ķÀ»ðǽսÂÔ£¬£¬ £¬£¬£¬£¬¹Ø±Õ·ÇÐëÒªµÄÓ¦Óö˿ڻòЧÀÍ£¬£¬ £¬£¬£¬£¬ïÔÌ­½«Î£ÏÕЧÀÍ£¨ÈçSSH¡¢RDPµÈ£©Ì»Â¶µ½¹«Íø£¬£¬ £¬£¬£¬£¬ïÔÌ­¹¥»÷Ãæ¡£¡£¡£¡£¡£
ʹÓÃÆóÒµ¼¶Çå¾²²úÆ·£¬£¬ £¬£¬£¬£¬ÌáÉýÆóÒµµÄÍøÂçÇå¾²ÐÔÄÜ¡£¡£¡£¡£¡£
ÔöǿϵͳÓû§ºÍȨÏÞÖÎÀí£¬£¬ £¬£¬£¬£¬ÆôÓöàÒòËØÈÏÖ¤»úÖÆºÍ×îСȨÏÞÔ­Ôò£¬£¬ £¬£¬£¬£¬Óû§ºÍÈí¼þȨÏÞÓ¦¼á³ÖÔÚ×îµÍÏÞ¶È¡£¡£¡£¡£¡£
ÆôÓÃÇ¿ÃÜÂëÕ½ÂÔ²¢ÉèÖÃΪ°´ÆÚÐ޸ġ£¡£¡£¡£¡£


3.4 ²Î¿¼Á´½Ó


https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_31.html/
https://securityonline.info/google-chrome-zero-day-patch-cve-2026-5281-exploited-in-the-wild/
https://nvd.nist.gov/vuln/detail/CVE-2026-5281