PT-2026-31498 · Google · Google Chrome

Lyra Rebane + 1 · Published 2025-06-14 · Updated 2026-04-12 · CVE-2026-5880

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.55

Description A flaw in policy enforcement within the browser's user interface allowed a remote attacker who had already compromised the renderer process to manipulate the Omnibox (URL bar) by presenting a crafted HTML page. This could lead to the spoofing of the URL displayed in the address bar.

Recommendations Update Google Chrome to version 147.0.7727.55 or later.

Fix

UI Misrepresentation of Critical Information

Weakness Enumeration

CWE-451

Related Identifiers

BDU:2026-06287

CVE-2026-5880

OPENSUSE-SU-2026:10530-1

OPENSUSE-SU-2026:20575-1

Affected Products

Google Chrome

References · 73

• https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-5880 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-5880 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-5880 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:20575-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10530-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-06287 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5880 · Security Note
• https://suse.com/security/cve/CVE-2026-5910 · Note
• https://suse.com/security/cve/CVE-2026-5877 · Note
• https://suse.com/security/cve/CVE-2026-5879 · Note
• https://bugzilla.suse.com/1261758 · Note
• https://suse.com/security/cve/CVE-2026-5866 · Note
• https://suse.com/security/cve/CVE-2026-5905 · Note
• https://suse.com/security/cve/CVE-2026-5867 · Note