CISA Issues Alert on Chrome Zero-Day Under Active Exploitation

CISA issued an urgent warning about a critical zero-day (CVE-2026-5281) in Google Dawn — a use-after-free flaw in the Chromium engine that enables arbitrary code execution via malicious web pages. The vulnerability is being actively exploited in the wild, affects all Chromium-based browsers (Chrome, Edge, Opera, Brave, etc.), was added to CISA's KEV catalog, and administrators and users are urged to apply vendor patches immediately or temporarily stop using vulnerable browsers.