CVE-2026-5864

CVE-2026-5864 is a heap buffer overflow vulnerability in the WebAudio component of Google Chrome versions prior to 147.0.7727.55 that could allow remote attackers to extract sensitive information from process memory through a malicious HTML page. The vulnerability affects Chrome browser users across multiple platforms and requires only a crafted webpage for delivery. The vulnerability is rated as medium severity with a CVSS score of 4.3, featuring a network attack vector with low complexity and no special privileges required, though user interaction is necessary. The primary impact is limited to information disclosure from memory; there is no risk of system compromise or service disruption. Chromium has assigned it a high security severity designation despite the moderate CVSS score, reflecting the nature of memory disclosure attacks. This vulnerability is not currently being actively exploited in the wild, as indicated by its inactive status on threat lists and lack of inclusion in the Known Exploited Vulnerabilities catalog. The extremely low EPSS score of 0.00029 indicates minimal community exploitation activity. Organizations should prioritize patching to Chrome 147.0.7727.55 or later, but this does not represent an immediate critical threat.