CVE Catalog
CVE-2026-5891
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk0.21%
11th percentile - higher than 11% of all known CVEs
Summary
Insufficient policy enforcement in browser UI in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page.
Risk Assessment
An attacker can spoof a trusted interface, potentially leading to data theft or tricking the user into performing dangerous actions.
Recommendation
Update Google Chrome to version 147.0.7727.55 or later.
Original NVD description (English source)
Insufficient policy enforcement in browser UI in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)