CyberRota Analysis
AI-GeneratedGoogle Chrome on Android versions prior to 152.0.7977.65 is vulnerable due to insufficient authorization in the WebAppInstalls feature, enabling remote attackers to exploit a compromised renderer process and access sensitive information through a specially crafted HTML page. Organizations using affected versions should prioritize patching this vulnerability to mitigate potential data exposure risks.
CVE
CVE-2026-79044
Severity
MEDIUM
CVSS
5.3
EPSS
0.40%
Android Chrome
Original NVD Description
Missing authorization in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
Related CVEs
Other vulnerabilities affecting the same vendor(s)