CVE-2026-5888

MediumCVSS 6.5

Published: 08/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

17th percentile - higher than 17% of all known CVEs

Summary

Google Chrome prior to version 147.0.7727.55 has an uninitialized use vulnerability in WebCodecs. A remote attacker can obtain potentially sensitive information from process memory via a crafted HTML page.

Risk Assessment

An attacker can leak sensitive data from browser memory, potentially leading to disclosure of user information.

Recommendation

Update Google Chrome to version 147.0.7727.55 or later.

Original NVD description (English source)

Uninitialized Use in WebCodecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)