CVE•Published 2026-04-08•Modified 2026-04-13•1 article on news•7 live references•NVD data

CVE-2026-5902Google · Chrome

Vulnerability data via NVD (ingested)

CVSS v3.1

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS percentile

—

Weaknesses (CWE)

CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Description

Race in Media in Google Chrome on Android prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to corrupt media stream metadata via a crafted HTML page. (Chromium security severity: Low)

Timeline

Published 2026-04-08

Modified 2026-04-13

External references

NVD MITRE Exploit-DB GitHub PoC Sploitus trickest/cve VulnCheck

Search for exposed instances

Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).

Shodan · vuln tag0 hosts

vuln:CVE-2026-5902

Hosts Shodan has explicitly fingerprinted as vulnerable.

Shodan · product

product:"Google Chrome"

All exposed Google Chrome instances — cross-reference with the CVE's affected-version range.

Shodan · banner/body mention

http.html:"Chrome"

HTTP body or banner mentions "Chrome" — catches deploys Shodan didn't identify as a product.

More intel sources (5)

vuln:CVE-2026-5902

Country / ASN / product breakdown for the vuln query.

vulnerabilities.cve_id: CVE-2026-5902

Censys host search filtered to this CVE id.

CVE-2026-5902

Public source-code mentions — fast PoC discovery.

CVE-2026-5902

GitHub code search for direct mentions.

"CVE-2026-5902" exploit -site:nvd.nist.gov

Write-ups and news, NVD excluded.

Known PoCs on GitHub (8)

CVE-2026-59028 repos

Mr-xn/Penetration_Testing_POCHTML

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypas…

★ 7,408·updated 5d ago

Threekiii/Awesome-POCJava

一个漏洞 PoC 知识库。A knowledge base for vulnerability PoCs(Proof of Concept), with 1k+ vulnerabilities.

★ 5,063·updated 1mo ago

GhostTroops/TOPShell

TOP All bugbounty pentesting CVE-2023- POC Exp RCE example payload Things

★ 733·updated today

Ostorlab/KEVunknown

Ostorlab KEV: One-command to detect most remotely known exploitable vulnerabilities. Sourced from CISA KEV, Google's Tsunami, Ostorlab's Asteroid and Bug Bounty programs.

★ 612·updated 3mo ago

gaahrdner/starredunknown

A curated list of my GitHub stars!

★ 43·updated today

oslook/n8n-workflowsunknown

4200 + Workflow Automation Templates are Grouped by Categories/Services for easy navigation

★ 6·updated 11mo ago

mrhenrike/FirewallXPL-ForgePython

Perimeter security exploitation framework — 164 modules covering FW, NGFW, UTM, WAF, VPN, NAC, LB, and OT/ICS firewalls (Fortinet, Cisco, Palo Alto, F5, Citrix, Check Point, SonicW…

★ 5·updated 3d ago

ZoEplA/AuthSpark_DATAunknown

Test Dataset Information of AuthSpark

★ 4·updated 6mo ago