CESS-2026-5903 — Vulnetix

CESS-2026-5903 PUBLISHED CVSS 6.5 MEDIUM

Policy bypass in IFrameSandbox in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)

Risk Scores

CVSS 3.1

6.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Timeline

Apr 8, 2026 CVE Published

Open in Interactive Console →