CyberRota Analysis
AI-GeneratedGoogle Chrome versions prior to 152.0.7977.65 have a vulnerability in the Extensions component that allows remote attackers to bypass web origin policy through a manipulated HTML page, potentially leading to unauthorized access or data exposure. Although the Chromium security team has classified the severity as low, organizations using affected versions should prioritize patching to mitigate potential risks associated with compromised renderer processes.
CVE
CVE-2026-79190
Severity
MEDIUM
CVSS
4.3
EPSS
0.21%
Chrome
Original NVD Description
Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)
Related CVEs
Other vulnerabilities affecting the same vendor(s)