CVE Catalog
CVE-2026-5864
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk0.24%
15th percentile - higher than 15% of all known CVEs
Summary
Google Chrome prior to version 147.0.7727.55 has a heap buffer overflow in WebAudio, allowing a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Severity: High)
Risk Assessment
The risk involves leakage of sensitive data from memory, potentially leading to confidentiality breaches and further attacks.
Recommendation
Immediately update Google Chrome to version 147.0.7727.55 or later.
Original NVD description (English source)
Heap buffer overflow in WebAudio in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)