CVE Catalog
CVE-2026-5902
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.21%
12th percentile - higher than 12% of all known CVEs
Summary
A race condition in the Media component in Google Chrome on Android prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to corrupt media stream metadata via a crafted HTML page.
Risk Assessment
An attacker can manipulate media streams, potentially leading to information disclosure or further attacks on the user.
Recommendation
Update Google Chrome on Android to version 147.0.7727.55 or later.
Original NVD description (English source)
Race in Media in Google Chrome on Android prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to corrupt media stream metadata via a crafted HTML page. (Chromium security severity: Low)