SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-78979

MEDIUM · CVSS 4.3 EPSS 0.23%

Source: NVD + CISA KEV + EPSS · Published 2026-08-25 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

A race condition vulnerability in Google Chrome on Windows prior to version 152.0.7977.65 allows remote attackers to exploit social engineering tactics to bypass web origin policies through specially crafted HTML pages. Although classified as low severity, organizations using affected versions should prioritize patching to mitigate potential exploitation risks. Users and administrators of Chrome on Windows should ensure they are running the latest version to protect against this vulnerability.

CVE
CVE-2026-78979
Severity
MEDIUM
CVSS
4.3
EPSS
0.23%
Windows Chrome

Original NVD Description

Race condition in Core in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)

Related CVEs

Other vulnerabilities affecting the same vendor(s)