Main Vulnerability Database Vulnerabilities #VU145608

Cross-site scripting in Google Chromium - CVE-2026-79234

Published: August 26, 2026

Vulnerability identifier: #VU145608

CSH Severity: Medium

CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N]

CVE-ID: CVE-2026-79234

CWE-ID: CWE-79

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to inject unintended content.

The vulnerability exists due to improper neutralization of input during web page generation in the CSS handling component when rendering crafted web content. A remote attacker can cause the browser to process crafted CSS content to inject unintended content.

User interaction is required to load or open crafted web content.

Affected software

Google Chromium
Google Chrome

How to mitigate CVE-2026-79234

Install security update from vendor's website.

Google Chromium - update to 152.0.7977.64
Google Chrome - addressed in versions 151.0.7922.175, 152.0.7977.64

External References

Related Security Bulletins