CyberRota Analysis
AI-GeneratedA vulnerability in the WebXR component of Google Chrome prior to version 152.0.7977.65 allows remote attackers to exploit incorrect authorization, potentially accessing cross-origin data through a specially crafted HTML page. This issue highlights the importance of user awareness, as it relies on social engineering tactics to be effective. Organizations using affected versions of Chrome should prioritize updates to mitigate the risk of data exposure.
CVE
CVE-2026-79258
Severity
MEDIUM
CVSS
6.5
EPSS
0.30%
Chrome
Original NVD Description
Incorrect authorization in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
Related CVEs
Other vulnerabilities affecting the same vendor(s)