Main Vulnerability Database Vulnerabilities #VU145492

Improper privilege management in Google Chromium - CVE-2026-78999

Published: August 26, 2026

Vulnerability identifier: #VU145492

CSH Severity: Medium

CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-78999

CWE-ID: CWE-269

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to escalate privileges.

The vulnerability exists due to improper privilege management in Navigation when handling web content. A remote attacker can cause the browser to process specially crafted content to escalate privileges.

User interaction is required to trigger the issue.

Affected software

Google Chromium
Google Chrome

How to mitigate CVE-2026-78999

Install security update from vendor's website.

Google Chromium - update to 152.0.7977.64
Google Chrome - addressed in versions 151.0.7922.175, 152.0.7977.64

External References

Related Security Bulletins