SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-78942

MEDIUM · CVSS 4.3 EPSS 0.32%

Source: NVD + CISA KEV + EPSS · Published 2026-08-25 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

Google Chrome versions prior to 152.0.7977.65 are vulnerable due to an incorrect reference resolution in the Loader, which enables remote attackers to bypass web origin policy through specially crafted network traffic. This vulnerability could lead to unauthorized access to sensitive data or manipulation of web applications. Organizations using affected versions of Chrome should prioritize updating to mitigate potential security risks.

CVE
CVE-2026-78942
Severity
MEDIUM
CVSS
4.3
EPSS
0.32%
Chrome

Original NVD Description

Incorrect reference resolution in Loader in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via crafted network traffic. (Chromium security severity: Medium)

Related CVEs

Other vulnerabilities affecting the same vendor(s)