VDB

DEBIAN-CVE-2026-5890

DEBIAN-CVE-2026-5890 PUBLISHED CVSS 5.300000190734863 MEDIUM

Race in WebCodecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

Risk Scores

CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

Affected Products

VendorProductVersions
Debian:14chromium138.0.7204.183-1, 147.0.7727.55-1, 147.0.7727.55-1
Debian:11chromium99.0.4844.84-1, 103.0.5060.134-1~deb11u1, 103.0.5060.53-1
Debian:12chromium0, 137.0.7151.68-1~deb12u1, 138.0.7204.157-1
Debian:13chromium0, 139.0.7258.127-1, 139.0.7258.127-1~deb13u1

Timeline

  • Apr 8, 2026 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›