CVE-2026-5896

MediumCVSS 6.1/10Last modified Jul 24, 2026

Description

Policy bypass in Audio in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass sandbox download restrictions via a crafted HTML page. (Chromium security severity: Low)

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-693

Affected software

VendorProductVersions
GoogleChrome>= 147.0.7727.55, < 147.0.7727.55

References

Timeline

Published
Apr 8, 2026
Last modified
Jul 24, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-589618.4In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible background activity launch due to a logic error in the codeCVE-2026-589628.4In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible permission bypass due to a missing permission check. This cCVE-2026-589637.5In multiple locations, there is a possible denial of service due to improper input validation. This could lead to remote denial of service wCVE-2026-589648.4In checkDestination of SmsUsageMonitor.java, there is a possible permission bypass due to improper input validation. This could lead to locaCVE-2026-589658.4In handleAudioEffectBroadcast of MusicFxHelper.java, there is a possible permission bypass due to a confused deputy. This could lead to locaCVE-2026-589668.4In multiple functions of hppsfilter.c, there is a possible out-of-bounds write due to a stack buffer overflow. This could lead to local escaCVE-2026-589689.8In oapvd_vlc_metadata of oapv_vlc.c, there is a possible memory corruption due to a double free. This could lead to remote escalation of priCVE-2026-589694.0In multiple functions of MediaQualityService.java, there is a possible permission bypass due to a missing permission check. This could lead CVE-2026-58974.3Incorrect security UI in Downloads in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in speciCVE-2026-589708.4In deliverResult of AppTimeTracker.java, there is a possible background activity launch due to a confused deputy. This could lead to local eCVE-2026-589714.0In _mupdf_get_hdr of wprint_mupdf.c, there is a possible out-of-bounds read due to an integer overflow. This could lead to local informationCVE-2026-589748.4In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privi
CVE-2026-5896: Medium severity, CVSS 6.1 | Vulnix