SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-79208

MEDIUM · CVSS 5.9 EPSS 0.30%

Source: NVD + CISA KEV + EPSS · Published 2026-08-25 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

Google Chrome versions prior to 152.0.7977.65 are vulnerable due to a missing authorization in HTTP2, which could allow remote attackers to leak sensitive information through specially crafted network traffic. Organizations using affected versions of Chrome should prioritize updates to mitigate potential data exposure risks. This vulnerability is particularly relevant for enterprises handling sensitive information or those in regulated industries.

CVE
CVE-2026-79208
Severity
MEDIUM
CVSS
5.9
EPSS
0.30%
Chrome

Original NVD Description

Missing authorization in HTTP2 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via crafted network traffic. (Chromium security severity: Medium)

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-91748 HIGH CVE-2026-91747 LOW CVE-2026-91746 MEDIUM CVE-2026-91745 HIGH CVE-2026-91744 MEDIUM CVE-2026-91743 HIGH