CVE-2026-5291

CVE-2026-5291 describes a medium-severity information disclosure vulnerability in Google Chrome versions prior to 146.0.7680.178, stemming from an inappropriate WebGL implementation. A remote attacker could exploit this flaw by enticing a user to visit a crafted HTML page, potentially allowing the retrieval of sensitive information from the browser's process memory. There is currently no evidence of active exploitation, nor are there any public exploit modules or proof-of-concept code available. While not on the CISA KEV list and lacking media coverage, the vulnerability has received minimal community discussion.