CyberRota Analysis
AI-GeneratedA vulnerability in Google Chrome prior to version 152.0.7977.65 allows remote attackers to spoof the address bar by exploiting missing authorization in the Core component, potentially misleading users about the authenticity of a website. While the impact is classified as low, organizations that utilize Chrome should prioritize updating to the latest version to mitigate this risk and ensure user trust.
CVE
CVE-2026-78968
Severity
MEDIUM
CVSS
6.5
EPSS
0.30%
Chrome
Original NVD Description
Missing authorization in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially spoof address bar via a crafted HTML page. (Chromium security severity: Low)
Related CVEs
Other vulnerabilities affecting the same vendor(s)