9.6 CriticalCWE-416
CVE-2026-5874
Google Chrome vulnerability
GoogleChrome
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 26 Oct
0.3%probability of exploitation in the next 30 days
Higher than 16% of scored CVEs
SeverityCVSS
9.6Critical
Description NVD
Use after free in PrivateAI in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
Coverage 1 article · 1 outlet
- Chrome 147 patches critical WebML flaws, fixes 60 bugsSecurityWeek · first in our coverage · mentions it in passing