PT-2026-31517 · Google · Google Chrome

Islam Rzayev · Published 2026-01-11 · Updated 2026-04-15 · CVE-2026-5899

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.55

Description An issue in the History feature of the Google Chrome browser relates to errors in how information is presented in the user interface. Successful exploitation could allow a remote attacker to conduct cross-site scripting attacks. The security severity is considered low.

Recommendations Update Google Chrome to version 147.0.7727.55 or later.

Fix

Origin Validation Error

UI Misrepresentation of Critical Information

Weakness Enumeration

CWE-346

CWE-451

Related Identifiers

BDU:2026-04936

CVE-2026-5899

OPENSUSE-SU-2026:10530-1

OPENSUSE-SU-2026:20575-1

Affected Products

Google Chrome

References · 73

• https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5899 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:20575-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10530-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-04936 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-5899 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-5899 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-5899 · Security Note
• https://suse.com/security/cve/CVE-2026-5910 · Note
• https://suse.com/security/cve/CVE-2026-5877 · Note
• https://suse.com/security/cve/CVE-2026-5879 · Note
• https://bugzilla.suse.com/1261758 · Note
• https://suse.com/security/cve/CVE-2026-5866 · Note
• https://suse.com/security/cve/CVE-2026-5905 · Note
• https://suse.com/security/cve/CVE-2026-5867 · Note