CVE Catalog

CVE-2026-5893

MediumCVSS 6.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.15%

5th percentile - higher than 5% of all known CVEs

Summary

A race condition in V8 in Google Chrome prior to 147.0.7727.55 could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

Risk Assessment

An attacker could remotely crash the browser or potentially execute arbitrary code in the Chrome process context, compromising user data confidentiality and integrity.

Recommendation

Immediately update Google Chrome to version 147.0.7727.55 or later.

Original NVD description (English source)

Race in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS