cve-2026-5864

CVE-2026-5864 is a heap buffer overflow vulnerability in the WebAudio component of Chromium, affecting Chrome versions prior to 147.0.7727.55. The flaw allows a remote attacker to exploit a crafted HTML page to potentially read sensitive information from process memory. Microsoft has acknowledged the issue in its update guidance, confirming that the vulnerability extends to Microsoft Edge and other Chromium-based browsers. This bug underscores the ongoing challenge of memory safety flaws in the Chromium engine, a category that includes buffer overflows and use-after-free errors. Users are advised to update their browsers to the latest versions to mitigate the risk.