Insufficient Policy Enforcement in Google Chrome

CVE-2026-5899

What is CVE-2026-5899?

The vulnerability in Google Chrome relates to insufficient enforcement of security policies in History Navigation. This flaw allows remote attackers to exploit user interactions through specific UI gestures, enabling them to inject arbitrary scripts or HTML content via a specially crafted HTML page. This presents a potential threat to user security as it can lead to unauthorized data access or manipulation, affecting overall browsing experience.

References