CVE-2026-79141

MediumCVSS 4.3

Published: 25/08/2026(UTC)Updated: 28/08/2026(UTC)Translated: 26/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

9th percentile - higher than 9% of all known CVEs

Summary

An incorrect authorization vulnerability in the Browser component in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

Risk Assessment

Bypassing origin policy may allow an attacker to access data from other websites, increasing the risk of data theft and web application security breaches.

Recommendation

It is recommended to update Google Chrome to version 152.0.7977.65 or later to restore proper authorization.

Other vulnerabilities in Browser

CVE-2026-41983Medium
Null pointer dereference vulnerability in the browser module. Impact: Successful exploitation of this vulnerability may affect availability.

Original NVD description (English source)

Incorrect authorization in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)