CVE-2026-5886
published 2026-04-08CVE-2026-5886: Out of bounds read in WebAudio in Google Chrome on Mac prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from…
PriorityP426medium5.3CVSS 3.1
AVNACHPRNUIRSUCHINAN
EPSS
0.22%
12.2th percentile
Out of bounds read in WebAudio in Google Chrome on Mac prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | chromium | < chromium 147.0.7727.55-1 (sid) | chromium 147.0.7727.55-1 (sid) |
| chrome | < 147.0.7727.55 | 147.0.7727.55 | |
| chrome | >= 147.0.7727.55 < 147.0.7727.55 | 147.0.7727.55 | |
| chrome_chrome | — | — | |
| paloalto | prisma_browser | — | — |
CVSS provenance
nvdv3.15.3MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
osv5.3MEDIUM
vendor_redhat5.5LOW
vendor_debian5.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: locking/lockdep: Invalidate stale class_cache entries for zapped classes
vendor_redhat·2026-10-14·CVSS 5.5
CVE-2026-98398 [LOW] CWE-825 kernel: locking/lockdep: Invalidate stale class_cache entries for zapped classes
kernel: locking/lockdep: Invalidate stale class_cache entries for zapped classes
In the Linux kernel, the following vulnerability has been resolved:
locking/lockdep: Invalidate stale class_cache entries for zapped classes
syzbot reported a lockdep splat hitting DEBUG_LOCKS_WARN_ON(1) in
hlock_class() due to an invalid class_idx:
WARNING: kernel/locking/lockdep.c:238 at __lock_acquire+0x382/0x2cf0 kernel/locking/lockdep.c:5203
Workqueue: wg-crypt-wg0 wg_packet_tx_worker
RIP: 0010:hlock_class kernel/locking/lockdep.c:238 [inline]
RIP: 0010:check_wait_context kernel/locking/lockdep.c:4870 [inline]
RIP: 0010:__lock_acquire+0x389/0x2cf0 kernel/locking/lockdep.c:5203
Call Trace:
lock_acquire+0x106/0x350 kernel/locking/lockdep.c:5886
_raw_spin_lock+0x2e/0x40 kernel/locking/spinlock.c:173
tcp_ts
Palo Alto
PAN-SA-2026-0007 Chromium and Prisma Browser: Monthly Vulnerability Update (May 2026)
vendor_paloalto·2026-05-13·CVSS 8.8
CVE-2026-4439 [HIGH] PAN-SA-2026-0007 Chromium and Prisma Browser: Monthly Vulnerability Update (May 2026)
PAN-SA-2026-0007 Chromium and Prisma Browser: Monthly Vulnerability Update (May 2026)
Palo Alto Networks incorporated the following Chromium security fixes into our products: https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_28.html https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_22.html https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_15.html https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html CVE Summary CVE-2026-4439 Out of bounds memory access in WebGL CVE-2026-4440 Out of bounds read and write in WebGL CVE-2026-4441 Use after free in Base CVE-2026-4442 Heap buffer overflow in
Red Hat
chromium-browser: Out of bounds read in WebAudio
vendor_redhat·2026-04-07·CVSS 5.3
CVE-2026-5886 [MEDIUM] CWE-125 chromium-browser: Out of bounds read in WebAudio
chromium-browser: Out of bounds read in WebAudio
Out of bounds read in WebAudio in Google Chrome on Mac prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
An out of bounds read flaw was found in the WebAudio component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=485397283
Statement: Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.
Chrome
Stable Channel Update for Desktop: CVE-2026-5885
vendor_chrome·2026-04-07·CVSS 6.5
CVE-2026-5885 [MEDIUM] Stable Channel Update for Desktop: CVE-2026-5885
Stable Channel Update for Desktop
CVE-2026-5885: Insufficient validation of untrusted input in WebML. Reported by Bryan Bernhart on 2026-02-17 [TBD][ 485397283 ] Medium CVE-2026-5886: Out of bounds read in WebAudio
Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-02-18 [TBD][ 486079015 ] Medium CVE-2026-5887: Insufficient validation of untrusted input in Downloads
Severity: medium
Debian
CVE-2026-5886: chromium - Out of bounds read in WebAudio in Google Chrome on Mac prior to 147.0.7727.55 al...
vendor_debian·2026·CVSS 5.3
CVE-2026-5886 [MEDIUM] CVE-2026-5886: chromium - Out of bounds read in WebAudio in Google Chrome on Mac prior to 147.0.7727.55 al...
Out of bounds read in WebAudio in Google Chrome on Mac prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
Scope: local
bookworm: open
bullseye: open
forky: open
sid: resolved (fixed in 147.0.7727.55-1)
trixie: open
VulDB
Google Chrome up to 146.0.7680.178 on macOS WebAudio out-of-bounds (ID 485397 / WID-SEC-2026-1030)
vuldb·2026-04-11·CVSS 5.3
CVE-2026-5886 [MEDIUM] Google Chrome up to 146.0.7680.178 on macOS WebAudio out-of-bounds (ID 485397 / WID-SEC-2026-1030)
A vulnerability, which was classified as problematic, was found in Google Chrome on macOS. The affected element is an unknown function of the component WebAudio. Executing a manipulation can lead to out-of-bounds read.
This vulnerability appears as CVE-2026-5886. The attack may be performed from remote. There is no available exploit.
You should upgrade the affected component.
GHSA
GHSA-j5p3-q3mr-g82w: Out of bounds read in WebAudio in Google Chrome on Mac prior to 147
ghsa_unreviewed·2026-04-09
CVE-2026-5886 CWE-125 GHSA-j5p3-q3mr-g82w: Out of bounds read in WebAudio in Google Chrome on Mac prior to 147
Out of bounds read in WebAudio in Google Chrome on Mac prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
OSV
CVE-2026-5886: Out of bounds read in WebAudio in Google Chrome on Mac prior to 147
osv·2026-04-08·CVSS 5.3
CVE-2026-5886 [MEDIUM] CVE-2026-5886: Out of bounds read in WebAudio in Google Chrome on Mac prior to 147
Out of bounds read in WebAudio in Google Chrome on Mac prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
No detection rules found.
No public exploits indexed.
Sans Isc
Microsoft Patch Tuesday April 2026., (Tue, Apr 14th)
blogs_sans_isc·2026-04-14·CVSS 8.8
[HIGH] Microsoft Patch Tuesday April 2026., (Tue, Apr 14th)
Microsoft Patch Tuesday April 2026.
Published: 2026-04-14. Last Updated: 2026-04-14 17:46:09 UTC
by Johannes Ullrich (Version: 1)
0 comment(s)
This month's Microsoft Patch Tuesday looks like a record one, but let's look at it a bit closer to understand what is happening
The update patches a total of 243 vulnerabilities. However, 78 of them are Chromium issues affecting Microsoft Edge. Patches for Edge were released earlier. This leaves 165 vulnerabilities that are not Edge-related. Of these, 8 are rated critical, and 154 are important. One vulnerability has already been exploited, and another was made public before today but has not yet been seen in the wild.
Noteworthy Vulnerabilities:
CVE-2026-33827 (Windows TCP/IP Remote Code Execution Vulnerability): As a packet nerd, I love thes
Wiz
CVE-2026-5886 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 8.8
CVE-2026-5886 [HIGH] CVE-2026-5886 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-5886 :
Google Chrome vulnerability analysis and mitigation
Out of bounds read in WebAudio in Google Chrome on Mac prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
Source : NVD
Published April 8, 2026
CNA Score N/A
Affected Technologies
Google Chrome
Chromium
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 9.4
Exploitation Probability (EPSS) N/A
Affected packages and libraries
cpe:2.3:a:google:chrome
chromium
Sources
NVD
Debian 11, 12, 13, 14 No Fix Added at: Apr 09, 2026
Echo No Fix Added at: Apr 09, 2026
Linux Has Fix Added at: Apr 09, 2026
Wi
Bugzilla
CVE-2026-98398 kernel: locking/lockdep: Invalidate stale class_cache entries for zapped classes
bugzilla·2026-10-14
CVE-2026-98398 [MEDIUM] CVE-2026-98398 kernel: locking/lockdep: Invalidate stale class_cache entries for zapped classes
CVE-2026-98398 kernel: locking/lockdep: Invalidate stale class_cache entries for zapped classes
In the Linux kernel, the following vulnerability has been resolved:
locking/lockdep: Invalidate stale class_cache entries for zapped classes
syzbot reported a lockdep splat hitting DEBUG_LOCKS_WARN_ON(1) in
hlock_class() due to an invalid class_idx:
WARNING: kernel/locking/lockdep.c:238 at __lock_acquire+0x382/0x2cf0 kernel/locking/lockdep.c:5203
Workqueue: wg-crypt-wg0 wg_packet_tx_worker
RIP: 0010:hlock_class kernel/locking/lockdep.c:238 [inline]
RIP: 0010:check_wait_context kernel/locking/lockdep.c:4870 [inline]
RIP: 0010:__lock_acquire+0x389/0x2cf0 kernel/locking/lockdep.c:5203
Call Trace:
lock_acquire+0x106/0x350 kernel/locking/lockdep.c:5886
_raw_spin_lock+0x2e/0x40 kernel/locking/spi
Bugzilla
CVE-2026-80687 kernel: iommufd/viommu: Release the igroup lock on the vdevice_size error path
bugzilla·2026-08-28
CVE-2026-80687 [LOW] CVE-2026-80687 kernel: iommufd/viommu: Release the igroup lock on the vdevice_size error path
CVE-2026-80687 kernel: iommufd/viommu: Release the igroup lock on the vdevice_size error path
In the Linux kernel, the following vulnerability has been resolved:
iommufd/viommu: Release the igroup lock on the vdevice_size error path
iommufd_vdevice_alloc_ioctl() takes idev->igroup->lock, then validates the
driver's vdevice_size against the core structure size with a WARN_ON_ONCE.
On failure that guard jumps to out_put_idev, below out_unlock_igroup, so it
skips the mutex_unlock(), leaving the igroup lock held and deadlocking the
next vDEVICE operation on that group.
Jump to out_unlock_igroup instead.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2026082802-CVE-2026-80687-5886@gregkh/T
Bugzilla
CVE-2026-5886 chromium-browser: Out of bounds read in WebAudio
bugzilla·2026-04-08·CVSS 5.3
CVE-2026-5886 [MEDIUM] CVE-2026-5886 chromium-browser: Out of bounds read in WebAudio
CVE-2026-5886 chromium-browser: Out of bounds read in WebAudio
Out of bounds read in WebAudio in Google Chrome on Mac prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
2026-04-08
Published