CVE-2026-79152

CriticalCVSS 9.8

Published: 25/08/2026(UTC)Updated: 26/08/2026(UTC)Translated: 26/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.12%

2th percentile - higher than 2% of all known CVEs

Summary

Incorrect authorization in CustomTabs in Google Chrome on Android prior to 152.0.7977.65 allowed a local attacker to bypass web origin policy via a co-installed app. The issue has a low severity.

Risk Assessment

A local attacker could access data from other origins, potentially leading to a breach of app isolation.

Recommendation

Update Google Chrome on Android to version 152.0.7977.65 or later to mitigate this vulnerability.

Original NVD description (English source)

Incorrect authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to bypass web origin policy via a co-installed app. (Chromium security severity: Low)