CVE-2026-76039
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
Incorrect reference resolution in Core in Google Chrome on Android prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: High)
Risk Assessment
An attacker could exploit this vulnerability to obtain sensitive information, potentially leading to privacy breaches or further attacks.
Recommendation
Update Google Chrome on Android to version 151.0.7922.169 or later. Users should also avoid clicking on suspicious links.
Original NVD description (English source)
Incorrect reference resolution in Core in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: High)