cve-2026-5915

CVE-2026-5915 is a WebML memory-corruption vulnerability in Google Chrome that could allow a remote attacker to trigger an out-of-bounds memory write via a crafted HTML page. The flaw affects Chrome versions prior to 147.0.7727.55, and Microsoft has included it in security guidance due to the Chromium ecosystem risk. Although rated Low severity by Chromium, the exploit potential is notable because browser bugs involving malformed input can become serious if they provide a stable exploitation primitive. Users are advised to update Chrome to version 147.0.7727.55 or later to mitigate this vulnerability.