CVE-2026-76039

Received Received - Intake

Incorrect Reference Resolution in Google Chrome on Android

Publication date: 2026-08-18

Last updated on: 2026-08-18

Assigner: Chrome

Description

Incorrect reference resolution in Core in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: High)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-18

Last Modified

2026-08-18

Generated

2026-08-19

AI Q&A

2026-08-19

EPSS Evaluated

N/A

NVD

CVE-2026-76039

EUVD

EUVD-2026-61228

Affected Vendors & Products

Vendor	Product	Version / Range
google	chrome	to 151.0.7922.169 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-706	The product uses a name or reference to access a resource, but the name/reference resolves to a resource that is outside of the intended control sphere.

Attack-Flow Graph

Executive Summary

This vulnerability involves incorrect reference resolution in Google Chrome on Android. A remote attacker could exploit this by tricking a user into visiting a crafted HTML page, potentially leading to the disclosure of sensitive information.

Impact Analysis

The vulnerability could allow an attacker to obtain sensitive information from your device if you visit a malicious webpage. This might include personal data, login credentials, or other confidential details.

Compliance Impact

This vulnerability could lead to unauthorized access to personal data, potentially violating GDPR and HIPAA compliance. Organizations must ensure affected systems are patched to prevent data breaches and maintain regulatory compliance.

Mitigation Strategies

Update Google Chrome on Android to version 151.0.7922.169 or later to address the vulnerability.

Hi! I’m here to help you understand CVE-2026-76039. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70