CVE-2026-5885
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
Google Chrome on Windows prior to version 147.0.7727.55 has insufficient validation of untrusted input in WebML, allowing a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Severity: Medium)
Risk Assessment
The risk involves leakage of sensitive data from browser memory, such as passwords, tokens, or personal information, potentially leading to confidentiality breaches.
Recommendation
Update Google Chrome to version 147.0.7727.55 or later.
Original NVD description (English source)
Insufficient validation of untrusted input in WebML in Google Chrome on Windows prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)