8.8 HighCWE-416
CVE-2026-5860
Google Chrome vulnerability
GoogleChrome
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 26 Oct
0.5%probability of exploitation in the next 30 days
Higher than 41% of scored CVEs
SeverityCVSS
8.8High
Description NVD
Use after free in WebRTC in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Coverage 1 article · 1 outlet
- Chrome 147 patches critical WebML flaws, fixes 60 bugsSecurityWeek · first in our coverage · mentions it in passing