CVE-2026-5283: Inappropriate implementation in Google Chrome
CVE-2026-5283 is a vulnerability in the ANGLE component of Google Chrome prior to version 146. 0. 7680. 178. It allows a remote attacker to leak cross-origin data by using a crafted HTML page. The vulnerability has a CVSS score of 6. 5, indicating medium severity, and is classified as a data leak without integrity or availability impact. No known exploits are reported in the wild. There is no explicit vendor advisory or patch link provided in the data, so patch status is not confirmed.
AI Analysis
Technical Summary
This vulnerability involves an inappropriate implementation in the ANGLE graphics engine within Google Chrome versions before 146.0.7680.178. It enables a remote attacker to bypass same-origin policy restrictions and leak sensitive cross-origin data by delivering a specially crafted HTML page. The CVSS vector indicates the attack requires no privileges but user interaction, and the impact is limited to confidentiality loss without affecting integrity or availability. The vulnerability is categorized under CWE-352 (Cross-Site Request Forgery), CWE-346 (Origin Validation Error), and CWE-285 (Improper Authorization).
Potential Impact
Successful exploitation results in unauthorized disclosure of cross-origin data, compromising user confidentiality. There is no impact on data integrity or system availability. The vulnerability could be leveraged by remote attackers without prior access but requires user interaction to trigger.
Mitigation Recommendations
Patch status is not yet confirmed — check the official Google Chrome vendor advisory for current remediation guidance. Users should update to Chrome version 146.0.7680.178 or later once the patch is officially released. Until then, exercising caution with untrusted web content is advisable.
CVE-2026-5283: Inappropriate implementation in Google Chrome
Description
CVE-2026-5283 is a vulnerability in the ANGLE component of Google Chrome prior to version 146. 0. 7680. 178. It allows a remote attacker to leak cross-origin data by using a crafted HTML page. The vulnerability has a CVSS score of 6. 5, indicating medium severity, and is classified as a data leak without integrity or availability impact. No known exploits are reported in the wild. There is no explicit vendor advisory or patch link provided in the data, so patch status is not confirmed.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability involves an inappropriate implementation in the ANGLE graphics engine within Google Chrome versions before 146.0.7680.178. It enables a remote attacker to bypass same-origin policy restrictions and leak sensitive cross-origin data by delivering a specially crafted HTML page. The CVSS vector indicates the attack requires no privileges but user interaction, and the impact is limited to confidentiality loss without affecting integrity or availability. The vulnerability is categorized under CWE-352 (Cross-Site Request Forgery), CWE-346 (Origin Validation Error), and CWE-285 (Improper Authorization).
Potential Impact
Successful exploitation results in unauthorized disclosure of cross-origin data, compromising user confidentiality. There is no impact on data integrity or system availability. The vulnerability could be leveraged by remote attackers without prior access but requires user interaction to trigger.
Mitigation Recommendations
Patch status is not yet confirmed — check the official Google Chrome vendor advisory for current remediation guidance. Users should update to Chrome version 146.0.7680.178 or later once the patch is officially released. Until then, exercising caution with untrusted web content is advisable.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- Chrome
- Date Reserved
- 2026-03-31T20:07:13.813Z
- Cvss Version
- null
- State
- PUBLISHED
Threat ID: 69cca4c2e6bfc5ba1d9930e1
Added to database: 4/1/2026, 4:53:22 AM
Last enriched: 4/8/2026, 10:40:05 AM
Last updated: 5/20/2026, 9:37:23 PM
Views: 35
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.