CVE Catalog
CVE-2026-5918
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk0.16%
5th percentile - higher than 5% of all known CVEs
Summary
Google Chrome prior to 147.0.7727.55 has an inappropriate implementation in Navigation, allowing a remote attacker who compromised the renderer process to leak cross-origin data via a crafted HTML page. (Severity: Low)
Risk Assessment
Risk of cross-origin data leakage, potentially leading to information theft or browser isolation bypass.
Recommendation
Update Google Chrome to version 147.0.7727.55 or later.
Original NVD description (English source)
Inappropriate implementation in Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)