CVE Catalog
CVE-2026-5878
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk0.19%
9th percentile - higher than 9% of all known CVEs
Summary
Google Chrome prior to 147.0.7727.55 has incorrect security UI in Blink, allowing UI spoofing via crafted HTML.
Risk Assessment
Risk of user being tricked into performing unsafe actions, e.g., clicking a fake button or submitting data.
Recommendation
Update Google Chrome to version 147.0.7727.55 or later.
Original NVD description (English source)
Incorrect security UI in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)