CVE-2026-79146

Опубликовано: 25 авг. 2026

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

Information leak in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. (Chromium security severity: Medium)

Ссылки

https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html
Release Notes
Vendor Advisory
https://issues.chromium.org/issues/517772510
Permissions Required

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Версия до 152.0.7977.65 (исключая)

cpe:2.3:o:google:android:-:*:*:*:*:*:*:*

EPSS

Процентиль: 1%

0.00106

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVE-2026-79146

CVSS3: 5.5

ubuntu

28 дней назад

Information leak in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. (Chromium security severity: Medium)

CVE-2026-79146

CVSS3: 5.5

debian

28 дней назад

Information leak in CustomTabs in Google Chrome on on Android prior to ...

GHSA-gvqc-r5wc-vh49

CVSS3: 5.5

github

28 дней назад

Information leak in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. (Chromium security severity: Medium)

openSUSE-SU-2026:21724-1

suse-cvrf

22 дня назад

Security update for chromium

EPSS

Процентиль: 1%

0.00106

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-200