CVE-2026-5909

CVE-2026-5909 is an integer overflow vulnerability in the Media component of Google Chrome versions prior to 147.0.7727.55 that could enable remote attackers to trigger heap corruption through specially crafted video files. The vulnerability requires user interaction to exploit but does not require authentication or special privileges. While Chromium assigned this a Low security severity rating, the CVSS score of 8.8 reflects high potential impact, including compromise of confidentiality, integrity, and availability of affected systems. This vulnerability is not currently listed on the Known Exploited Vulnerabilities catalog and shows minimal community attention with an EPSS score indicating it ranks lower than 99.75 percent of all CVEs in exploitation likelihood. Organizations should prioritize patching Chrome to version 147.0.7727.55 or later as part of routine security updates, though immediate emergency response is not warranted given the absence of active exploitation evidence.