cve 2026 5291

CVE-2026-5291 is a medium-severity vulnerability in Google Chrome's WebGL implementation, affecting versions prior to 146.0.7680.178. The flaw involves an inappropriate implementation in WebGL that could allow a remote attacker to extract sensitive data from process memory via a crafted HTML page. Microsoft's Security Update Guide mirrors the Chrome advisory, confirming the issue. While classified as medium severity, the combination of remote delivery, user interaction, and memory disclosure makes it a priority for enterprise patching. Users should update Chrome to version 146.0.7680.178 or later to mitigate the risk.