PT-2026-31514

CVE-2026-5896

Published

2023-05-13

Updated

2026-08-31

Description by

CVSS 2.0

7.8

High

MetricsAV:N/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.55

Description A policy bypass issue existed in Google Chrome's audio component, prior to version 147.0.7727.55. A remote attacker could bypass sandbox download restrictions by convincing a user to perform specific UI gestures on a crafted HTML page. The Chromium security severity is rated as Low.

Recommendations Update Google Chrome to version 147.0.7727.55 or later.

Exploitability

Fix

Impacts

Researchers

Lbherrera

Luan Herrera

Vendors

Affected products

Weakness enumeration

CWE-693: Protection Mechanism Failure

CWE-264