CVE-2026-5877

CVE-2026-5877 is a use-after-free vulnerability in the Navigation component of Google Chrome versions prior to 147.0.7727.55 that permits remote code execution within the browser sandbox through a maliciously crafted HTML page. The vulnerability affects Chrome's core navigation functionality and represents a sandbox escape risk requiring user interaction to exploit. The vulnerability carries a CVSS v3.1 score of 8.8 (High), indicating significant risk with a network-based attack vector requiring no special privileges but user interaction to trigger. The attack has low complexity and yields high impact across confidentiality, integrity, and availability. However, the EPSS score of 0.001390 suggests relatively low real-world exploitation probability, placing it in the lowest percentile of vulnerability exploit likelihood. There is currently no evidence of active exploitation in the wild. The vulnerability has not been added to the CISA Known Exploited Vulnerabilities catalog and shows no activity on exploit tracking platforms. Community attention remains minimal with a FAUCET risk score of 42.0 out of 100, indicating this should be prioritized as part of normal Chrome patching cycles but does not require emergency response protocols.