Main Vulnerability Database Vulnerabilities #VU145619

Exposure of Resource to Wrong Sphere in Google Chromium - CVE-2026-79068

Published: August 26, 2026

Vulnerability identifier: #VU145619

CSH Severity: Low

CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-79068

CWE-ID: CWE-668

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to disclose sensitive information.

The vulnerability exists due to improper resource exposure in StreamsAPI when handling web content. A remote attacker can cause the browser to expose resources to disclose sensitive information.

User interaction is required to visit or load crafted web content.

Affected software

Google Chromium
Google Chrome

How to mitigate CVE-2026-79068

Install security update from vendor's website.

Google Chromium - update to 152.0.7977.64
Google Chrome - addressed in versions 151.0.7922.175, 152.0.7977.64

External References

Related Security Bulletins