PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-5879 Google CVE debrief

CVE-2026-5879 is a high-severity vulnerability (CVSS 8.8) in Google Chrome on macOS, specifically within the ANGLE graphics layer. Insufficient validation of untrusted input allows remote code execution inside the Chrome sandbox when a user visits a crafted HTML page. The vulnerability was disclosed on 2026-04-08 and last modified on 2026-05-26. Google has rated this as Medium severity per Chromium's internal scale, though NVD assigns a HIGH CVSS score. The issue affects Chrome versions prior to 147.0.7727.55 on macOS. No known exploitation in the wild has been confirmed, and the vulnerability is not listed in CISA KEV.

Vendor
Google
Product
Chrome
CVSS
HIGH 8.8
CISA KEV
Not listed in stored evidence
Original CVE published
2026-04-08
Original CVE updated
2026-07-24
Advisory published
2026-04-08
Advisory updated
2026-07-24

Who should care

macOS users running Google Chrome; enterprise security teams managing browser deployments; organizations with bring-your-own-device policies where Chrome is permitted; security researchers tracking browser sandbox bypass techniques

Technical summary

The vulnerability resides in ANGLE (Almost Native Graphics Layer Engine), Chrome's compatibility layer for OpenGL ES on desktop platforms. Insufficient validation of untrusted input allows a remote attacker to achieve arbitrary code execution within the Chrome sandbox process. The attack vector requires user interaction (visiting a malicious HTML page) and results in high impact to confidentiality, integrity, and availability per CVSS:3.1 vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The sandbox containment limits but does not eliminate risk, as renderer compromise can enable further chain attacks.

Defensive priority

HIGH

Recommended defensive actions

  • Update Google Chrome on macOS to version 147.0.7727.55 or later
  • Verify Chrome version via chrome://settings/help
  • Enable automatic updates for Chrome to prevent future exposure
  • Monitor for unexpected browser crashes or graphics anomalies that may indicate exploitation attempts
  • Review and restrict execution of untrusted HTML content in isolated environments where patching is delayed

Evidence notes

Vendor advisory confirms fix in Chrome 147.0.7727.55. Chromium bug tracker entry exists but requires permissions to view full details. CPE data indicates macOS as the affected platform with Chrome as the vulnerable product.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-5879 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-5879

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-5879 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-5879

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.