CVE-2026-79143
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
An incorrect authorization vulnerability in the FileSystem component in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
Risk Assessment
An attacker may gain unauthorized access to system resources, potentially leading to integrity and confidentiality breaches in the organization.
Recommendation
It is recommended to update Google Chrome to version 152.0.7977.65 or later and educate users on recognizing social engineering attempts.
Other vulnerabilities in FileSystem
See all- CVE-2026-58558High
A permission control vulnerability in the file system allows unauthorized access to confidential data. Successful exploitation may compromise service confidentiality.
- CVE-2026-46914High
A vulnerability in the Oracle Solaris product (component: Filesystem) allows a low privileged attacker with logon to the infrastructure to compromise the system. Successful attacks can lead to unauthorized access to critical data and complete denial of service.
Original NVD description (English source)
Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)