CVE Catalog
CVE-2026-5905
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.19%
8th percentile - higher than 8% of all known CVEs
Summary
Google Chrome on Windows prior to 147.0.7727.55 has incorrect security UI in permissions, allowing domain spoofing via crafted HTML.
Risk Assessment
Risk of user being tricked into entering credentials or sensitive data on a spoofed page.
Recommendation
Update Google Chrome on Windows to version 147.0.7727.55 or later.
Original NVD description (English source)
Incorrect security UI in Permissions in Google Chrome on Windows prior to 147.0.7727.55 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low)