Google has now published CVE-2026-5899, a Chromium flaw in History Navigation that can let a remote attacker inject arbitrary scripts or HTML if they can lure a user into performing specific UI gestures on a crafted page. The issue is described by Google as “insufficient policy enforcement” and...