Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
2857 articles · 109874 vulns · 38/41 feeds (7d)
← Back to list
8.8
CVE-2026-5910EXPLOITEDPATCHED
google · chrome

CVE-2026-5910: Integer overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap

Description

Integer overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. (Chromium security severity: Low)

Affected Products

VendorProductVersions
googlechrome147.0.7727.55

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
googlechromecert_advisory90%
microsoftmicrosoft edgecert_advisory90%

References

  • https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html
  • https://issues.chromium.org/issues/485212874

Related News (2 articles)

Tier B
BSI Advisories1d ago
[NEU] [hoch] Google Chrome und Microsoft Edge: Mehrere Schwachstellen
→ No new info (linked only)
Tier C
VulDB1d ago
CVE-2026-5910 | Google Chrome up to 146.0.7680.178 Media integer overflow (ID 485212)
→ No new info (linked only)
CVSS 3.18.8 HIGH
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CISA KEV❌ No
Actively exploited✅ Yes
Patch available
147.0.7727.55
CWECWE-472
PublishedApr 8, 2026
Last enriched1d agov2
Trending Score53
Source articles2
Independent2
Info Completeness8/14
Missing: cvss, epss, kev, exploit, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

HIGHCVE-2026-5281EXPKEV
CVE-2026-5281: Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the render
Trending: 145
CRITICALCVE-2026-5858EXP
CVE-2026-5858: Heap buffer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary cod
Trending: 74
NONECVE-2026-5859EXP
CVE-2026-5859: Integer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap
Trending: 61
CRITICALCVE-2026-27144EXP
Miscompilation allows memory corruption via CONVNOP-wrapped array copy in cmd/compile
Trending: 57
HIGHCVE-2026-5914EXP
CVE-2026-5914: Type Confusion in CSS in Google Chrome prior to 147.0.7727.55 allowed an attacker who convinced a user to install a mali
Trending: 53

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Apr 8, 2026
Discovered by ZDM
Apr 8, 2026
Updated: description, severity, affectedVersions, activelyExploited
Apr 9, 2026
Actively Exploited
Apr 9, 2026
Patch Available
Apr 9, 2026

Version History

v2
Last enriched 1d ago
v2Tier C1d ago

Updated severity to CRITICAL, added affected version 146.0.7680.178, and corrected exploit availability.

descriptionseverityaffectedVersionsactivelyExploited
via VulDB
v11d ago

Initial creation