Main Vulnerability Database Vulnerabilities #VU145590

Improper Authorization in Google Chromium - CVE-2026-79191

Published: August 26, 2026

Vulnerability identifier: #VU145590

CSH Severity: Medium

CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-79191

CWE-ID: CWE-285

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to bypass authorization restrictions.

The vulnerability exists due to improper access control in SiteIsolation when rendering content. A remote attacker can trigger the browser to process crafted web content to bypass authorization restrictions.

User interaction is required to visit crafted web content.

Affected software

Google Chromium
Google Chrome

How to mitigate CVE-2026-79191

Install security update from vendor's website.

Google Chromium - update to 152.0.7977.64
Google Chrome - addressed in versions 151.0.7922.175, 152.0.7977.64

External References

Related Security Bulletins