Main Vulnerability Database Vulnerabilities #VU145576

Improper access control in Google Chromium - CVE-2026-79002

Published: August 26, 2026

Vulnerability identifier: #VU145576

CSH Severity: Medium

CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-79002

CWE-ID: CWE-284

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to bypass authorization controls.

The vulnerability exists due to improper access control in SiteIsolation when rendering web content. A remote attacker can cause the browser to process crafted content to bypass authorization controls.

User interaction is required to visit or load crafted content.

Affected software

Google Chromium
Google Chrome

How to mitigate CVE-2026-79002

Install security update from vendor's website.

Google Chromium - update to 152.0.7977.64
Google Chrome - addressed in versions 151.0.7922.175, 152.0.7977.64

External References

Related Security Bulletins