CVE-2026-5894

MediumCVSS 4.3

Published: 08/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

5th percentile - higher than 5% of all known CVEs

Summary

Google Chrome prior to 147.0.7727.55 has an inappropriate implementation in PDF, allowing a remote attacker to bypass navigation restrictions via a crafted HTML page. (Severity: Low)

Risk Assessment

Risk of navigation restriction bypass, potentially leading to unauthorized content access or browser isolation breach.

Recommendation

Update Google Chrome to version 147.0.7727.55 or later.

Original NVD description (English source)

Inappropriate implementation in PDF in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)