CVE-2005-4900: Google Chrome

Medium severity, CVSS 5.9. EPSS: 0.9% chance of exploitation in the next 30 days.

SHA-1 is not collision resistant, which makes it easier for context-dependent attackers to conduct spoofing attacks, as demonstrated by attacks on the use of SHA-1 in TLS 1.2. NOTE: this CVE exists to provide a common identifier for referencing this SHA-1 issue; the existence of an identifier is not, by itself, a technology recommendation.

Affected products

• Google Chrome: up to and including 47.0.2526.111

Published 2016-10-14. Last modified 2026-06-16.