CVE Catalog
CVE-2026-5881
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.22%
12th percentile - higher than 12% of all known CVEs
Summary
Policy bypass in LocalNetworkAccess in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)
Risk Assessment
The risk involves bypassing navigation restrictions, which could allow an attacker to access local network resources or perform unauthorized actions.
Recommendation
It is recommended to update Google Chrome to version 147.0.7727.55 or later.
Original NVD description (English source)
Policy bypass in LocalNetworkAccess in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)