CVE Catalog
CVE-2026-5867
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk0.29%
21th percentile - higher than 21% of all known CVEs
Summary
Google Chrome before 147.0.7727.55 has a heap buffer overflow in WebML, allowing a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium severity: High)
Risk Assessment
An attacker can leak sensitive data from browser memory, potentially leading to data theft or further attacks.
Recommendation
Update Google Chrome to version 147.0.7727.55 or later.
Original NVD description (English source)
Heap buffer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)