Improper access control in Google Chromium - CVE-2026-79055
Published: August 26, 2026
Vulnerability identifier: #VU145654
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-79055
CWE-ID: CWE-284
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to disclose sensitive information.
The vulnerability exists due to improper access control in Sharing when handling sharing operations. A remote attacker can induce the victim to interact with crafted content to disclose sensitive information.
User interaction is required.
Affected software
Google Chromium
Google Chrome
Google Chrome
How to mitigate CVE-2026-79055
Install security update from vendor's website.
Google Chromium - update to 152.0.7977.64
Google Chrome - addressed in versions 151.0.7922.175, 152.0.7977.64
Google Chrome - addressed in versions 151.0.7922.175, 152.0.7977.64