anonhaven
Ad

CVE-2026-5875

MEDIUM CVSS 3.1: 4.3 EPSS 0.03%
Updated Apr 11, 2026
Google
Parameter Value
CVSS 4.3 (MEDIUM)
Affected Versions before 147.0.7727.55
Type CWE-639 (Authorization Bypass)
Vendor Google
Public PoC No

Policy bypass in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

Attack Parameters

Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Privileges Required
None
No privileges needed
User Interaction
Required
User action required

Impact Assessment

Confidentiality
None
No data leak
Integrity
Low
Partial data modification
Availability
None
No disruption

CVSS Vector v3.1

Weakness Type (CWE)

CWE-639 Authorization Bypass

References 2

https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop…
chrome-cve-admin@google.com
https://issues.chromium.org/issues/430198264
chrome-cve-admin@google.com
Share Post Share Share Share

Related Vulnerabilities

CVE-2026-35622

Openclaw

6.0

CVE-2026-35617

Openclaw

2.3

CVE-2026-40109

Google

3.1

CVE-2026-5919

Google

6.5

CVE-2026-5918

Google

4.3