Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-78898

Опубликовано: 25 авг. 2026
Источник: nvd
CVSS3: 5.4
EPSS Низкий

Описание

Incorrect authorization in Downloads in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
Версия до 152.0.7977.65 (исключая)

EPSS

Процентиль: 16%
0.00247
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 5.4
ubuntu
23 дня назад

Incorrect authorization in Downloads in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVSS3: 5.4
redhat
23 дня назад

Incorrect authorization in Downloads in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

msrc
20 дней назад

Chromium: CVE-2026-78898 Incorrect authorization in Downloads

CVSS3: 5.4
debian
23 дня назад

Incorrect authorization in Downloads in Google Chrome prior to 152.0.7 ...

CVSS3: 5.4
github
23 дня назад

Incorrect authorization in Downloads in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

EPSS

Процентиль: 16%
0.00247
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-863