CVE Catalog
CVE-2026-5889
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk0.10%
1th percentile - higher than 1% of all known CVEs
Summary
A cryptographic flaw in PDFium in Google Chrome prior to 147.0.7727.55 allowed an attacker to read potentially sensitive information from encrypted PDFs via a brute-force attack.
Risk Assessment
The organization risks exposure of confidential data stored in encrypted PDF documents, which could be accessed by unauthorized individuals.
Recommendation
Immediately update Google Chrome to version 147.0.7727.55 or later, which includes a fix for this vulnerability.
Original NVD description (English source)
Cryptographic Flaw in PDFium in Google Chrome prior to 147.0.7727.55 allowed an attacker to read potentially sensitive information from encrypted PDFs via a brute-force attack. (Chromium security severity: Medium)