VDB

CESS-2026-5891

CESS-2026-5891 PUBLISHED CVSS 4.3 MEDIUM

Insufficient policy enforcement in browser UI in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

Risk Scores

CVSS 3.1
4.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Timeline

  • Apr 8, 2026 CVE Published
Open in Interactive Console →
$ Console Community · 100/wk Open console ›