EUVD-2026-20734

| CVE-2026-5907 HIGH
2026-04-08 Chrome GHSA-96rx-8295-gjvx
8.1
CVSS 3.1
Share

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
High

Lifecycle Timeline

4
Patch Released
Apr 08, 2026 - 23:32 nvd
Patch available
Analysis Generated
Apr 08, 2026 - 22:01 vuln.today
EUVD ID Assigned
Apr 08, 2026 - 22:01 euvd
EUVD-2026-20734
CVE Published
Apr 08, 2026 - 21:21 nvd
HIGH 8.1

Tags

Information Disclosure Buffer Overflow Google

Description

Insufficient data validation in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory read via a crafted video file. (Chromium security severity: Low)

Analysis

Out-of-bounds memory read in Google Chrome's media subsystem (versions prior to 147.0.7727.55) enables remote attackers to disclose sensitive information and trigger denial-of-service conditions via malicious video files. Exploitation requires user interaction (opening/playing crafted video content). …

Sign in for full analysis, threat intelligence, and remediation guidance.

Remediation

Within 24 hours: Inventory Chrome deployment versions across endpoints and identify instances below 147.0.7727.55. Within 7 days: Deploy Chrome version 147.0.7727.55 or later via your endpoint management system; prioritize systems handling sensitive data or frequent video consumption. …

Sign in for detailed remediation steps.

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

Sign in - Free

Priority Score

41
Low Medium High Critical
KEV: 0
EPSS: +0.0
CVSS: +40
POC: 0

Share

EUVD-2026-20734 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy