CyberRota Analysis
AI-GeneratedA vulnerability in the WebProtect feature of Google Chrome prior to version 152.0.7977.65 allows remote attackers to exploit incorrect authorization, potentially leaking sensitive information through specially crafted HTML pages. Organizations using affected versions of Chrome should prioritize updates to mitigate the risk of data exposure.
CVE
CVE-2026-78907
Severity
MEDIUM
CVSS
6.5
EPSS
0.37%
Chrome
Original NVD Description
Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)
Related CVEs
Other vulnerabilities affecting the same vendor(s)