Observable discrepancy in Google Chromium - CVE-2026-79287
Published: August 26, 2026
Vulnerability identifier: #VU145585
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-79287
CWE-ID: CWE-203
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to disclose sensitive information.
The vulnerability exists due to an observable discrepancy in forms when rendering content. A remote attacker can trick the victim into interacting with crafted content to disclose sensitive information.
User interaction is required.
Affected software
Google Chromium
Google Chrome
Google Chrome
How to mitigate CVE-2026-79287
Install security update from vendor's website.
Google Chromium - update to 152.0.7977.64
Google Chrome - addressed in versions 151.0.7922.175, 152.0.7977.64
Google Chrome - addressed in versions 151.0.7922.175, 152.0.7977.64