CVE-2026-5903 is a vulnerability in Google Chrome
Published on April 8, 2026
Policy bypass in IFrameSandbox in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)
Products Associated with CVE-2026-5903
Want to know whenever a new CVE is published for Google Chrome? stack.watch will email you.
Affected Versions
Google Chrome:- Version 147.0.7727.55 and below 147.0.7727.55 is affected.