CVE-2026-5913 is an out of bounds read vulnerability in the Blink component of Google Chrome before version 147.0.7727.55. It allows remote attackers to read memory outside the intended bounds by using a specially crafted HTML page. The vulnerability is classified under CWE-125 (Out-of-bounds Read) and has a CVSS v3.1 score of 8.1, indicating high severity with network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, high confidentiality impact, no integrity impact, and high availability impact. The vulnerability was publicly disclosed on April 8, 2026. The vendor advisory URL is provided but does not explicitly state patch or remediation details.

The vulnerability can lead to unauthorized disclosure of memory contents (confidentiality impact) and cause denial of service (availability impact) in affected Chrome versions. Integrity is not impacted. There are no known active exploits in the wild at the time of disclosure.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html for current remediation guidance. Users should update to Chrome version 147.0.7727.55 or later once an official fix is confirmed. Until then, avoid visiting untrusted or suspicious websites that could host crafted HTML content triggering this vulnerability.