CyberRota Analysis
AI-GeneratedA vulnerability in Google Chrome prior to version 152.0.7977.65 allows remote attackers to exploit incorrect authorization in extensions, potentially bypassing system access restrictions through social engineering tactics. This could lead to unauthorized access to sensitive data or system functions. Organizations using affected versions of Chrome should prioritize updating to mitigate the risk of exploitation.
CVE
CVE-2026-79137
Severity
MEDIUM
CVSS
4.3
EPSS
0.22%
Chrome
Original NVD Description
Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Medium)
Related CVEs
Other vulnerabilities affecting the same vendor(s)