CVE Catalog
CVE-2026-79058
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk0.23%
14th percentile - higher than 14% of all known CVEs
Summary
Missing authorization in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
Risk Assessment
UI spoofing could lead to phishing attacks, tricking users into revealing sensitive information.
Recommendation
Update Google Chrome to version 152.0.7977.65 or later to fix this vulnerability.
Original NVD description (English source)
Missing authorization in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)