Insufficient Control Flow Management in Google Chromium - CVE-2026-79033

 

Insufficient Control Flow Management in Google Chromium - CVE-2026-79033

Published: August 26, 2026


Vulnerability identifier: #VU145639
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-79033
CWE-ID: CWE-691
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to bypass intended control flow restrictions.

The vulnerability exists due to improper control flow management in DevTools when handling browser content. A remote attacker can cause the victim to interact with crafted content to bypass intended control flow restrictions.

User interaction is required.


Affected software

Google Chromium
Google Chrome

How to mitigate CVE-2026-79033

Install security update from vendor's website.

Google Chromium - update to 152.0.7977.64
Google Chrome - addressed in versions 151.0.7922.175, 152.0.7977.64

External References

Related Security Bulletins