CVE-2026-5889

Description

Cryptographic Flaw in PDFium in Google Chrome prior to 147.0.7727.55 allowed an attacker to read potentially sensitive information from encrypted PDFs via a brute-force attack. (Chromium security severity: Medium)

PUBLISHED Reserved 2026-04-08 | Published 2026-04-08 | Updated 2026-04-13 | Assigner Chrome

Problem types

Cryptographic Flaw

Product status

References

chromereleases.googleblog.com/...nel-update-for-desktop.html

issues.chromium.org/issues/486906037

cve.org (CVE-2026-5889)

nvd.nist.gov (CVE-2026-5889)

Download JSON