CVE Catalog
CVE-2026-79090
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.21%
11th percentile - higher than 11% of all known CVEs
Summary
Improper privilege management in the Actor component in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Severity: Low)
Risk Assessment
An attacker could gain unauthorized access to system resources, potentially leading to privilege escalation and security breaches.
Recommendation
Update Google Chrome to the latest version to fix this vulnerability.
Original NVD description (English source)
Improper privilege management in Actor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)