SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-79058

CRITICAL · CVSS 9.1 EPSS 0.32%

Source: NVD + CISA KEV + EPSS · Published 2026-08-25 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

Google Chrome versions prior to 152.0.7977.65 are vulnerable due to a lack of proper authorization in the Passwords feature, enabling remote attackers to spoof UI elements through a specially crafted HTML page. While the Chromium security team has classified the severity as low, organizations using affected versions should prioritize updates to mitigate potential user deception risks. This vulnerability is particularly relevant for security teams focused on browser security and user data protection.

CVE
CVE-2026-79058
Severity
CRITICAL
CVSS
9.1
EPSS
0.32%
Chrome

Original NVD Description

Missing authorization in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)

Related CVEs

Other vulnerabilities affecting the same vendor(s)