CVE-2026-5276

Advisory lineage Upstream: 0 Downstream: 3
Analyzed
Published: 01 Apr 2026, 04:41
Last modified:01 Apr 2026, 13:33

Vulnerability Summary

Overall Risk (default)
medium
26/100
CVSS Score
6.5 MEDIUM
v3.1 (cve.org)
EPSS Score
0.06% LOW
0% probability +0.01%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

01 Apr 2026, 04:41
Published
Vulnerability first disclosed
01 Apr 2026, 13:33
Last Modified
Vulnerability information updated

Description

Insufficient policy enforcement in WebUSB in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)

CVSS Metrics

  • v3.1•MEDIUM•Score: 6.5CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

EPSS Trends

Current EPSS score: 0.06%• Percentile: 20%

Techniques & Countermeasures

  • CWE-693•Protection Mechanism Failure

    The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

Affected Systems

  • Unknown•Chrome

    ≥ 146.0.7680.178, < 146.0.7680.178 | < 146.0.7680.177

References (2)