Use of Incorrectly-Resolved Name or Reference in Google Chromium - CVE-2026-79070

 

Use of Incorrectly-Resolved Name or Reference in Google Chromium - CVE-2026-79070

Published: August 26, 2026


Vulnerability identifier: #VU145604
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-79070
CWE-ID: CWE-706
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to disclose sensitive information.

The vulnerability exists due to improper reference resolution in Cache when processing web content. A remote attacker can cause the browser to handle crafted content to disclose sensitive information.

User interaction is required to visit or render crafted content.


Affected software

Google Chromium
Google Chrome

How to mitigate CVE-2026-79070

Install security update from vendor's website.

Google Chromium - update to 152.0.7977.64
Google Chrome - addressed in versions 151.0.7922.175, 152.0.7977.64

External References

Related Security Bulletins