Improper access control in Google Chromium - CVE-2026-79134
Published: August 26, 2026
Vulnerability identifier: #VU145622
CSH Severity: Medium
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-79134
CWE-ID: CWE-284
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to gain unauthorized access to media devices.
The vulnerability exists due to improper access control in GetUserMedia when handling media access requests. A remote attacker can trigger crafted web content to gain unauthorized access to media devices.
User interaction is required to visit or interact with crafted content.
Affected software
Google Chromium
Google Chrome
Google Chrome
How to mitigate CVE-2026-79134
Install security update from vendor's website.
Google Chromium - update to 152.0.7977.64
Google Chrome - addressed in versions 151.0.7922.175, 152.0.7977.64
Google Chrome - addressed in versions 151.0.7922.175, 152.0.7977.64