First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2026-5878

MediumCVSS 4.3/10Last modified Jul 24, 2026

Description

Incorrect security UI in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
Google	Chrome	>= 147.0.7727.55, < 147.0.7727.55

References

https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.htmlRelease Notes, Vendor Advisory
https://issues.chromium.org/issues/365089001Permissions Required

Timeline

Published: Apr 8, 2026
Last modified: Jul 24, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-58780In multiple locations, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote escalation of pri CVE-2026-587816.7In HostLinkBase::chreIpiHandler of host_link.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to l CVE-2026-58782In multiple locations, there is a possible denial of service due to a logic error in the code. This could lead to local denial of service wi CVE-2026-58783In multiple locations, there is a possible denial of service due to a logic error in the code. This could lead to local denial of service wi CVE-2026-587856.7In update_user_consent of main.rs, there is a possible elevation of privilege due to uninitialized data. This could lead to local escalation CVE-2026-587867.8In cnm_memset of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalation of CVE-2026-58787In chppWifiRangingEventNotification of clients/wifi.c, there is a possible Heap Buffer Overflow due to a logic error in the code. This could CVE-2026-587888.4In stpropnci_process_std of stpropnci_std.cc, there is a possible way to trigger an out of bounds write into global state due to a missing b CVE-2026-587897.5In s_gen_tile_param of multiple files, there is a possible way to trigger an out of bounds write in tile parameter arrays due to an incorrec CVE-2026-58798.8Insufficient validation of untrusted input in ANGLE in Google Chrome on Mac prior to 147.0.7727.55 allowed a remote attacker to execute arbi CVE-2026-587907.8In CMD_ENC_SET_PARAM of encoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalation CVE-2026-587917.8In pic_timing of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalation of