Incorrect Authorization in WebProtect in Google Chrome

Publication date: 2026-08-25

Last updated on: 2026-08-25

Assigner: Chrome

Description

Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-25

Last Modified

2026-08-25

Generated

2026-08-26

AI Q&A

2026-08-26

EPSS Evaluated

N/A

NVD

CVE-2026-79077

Affected Vendors & Products

Vendor	Product	Version / Range
google	chrome	to 152.0.7977.65 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-863	The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

Executive Summary

This vulnerability is an incorrect authorization issue in WebProtect within Google Chrome versions before 152.0.7977.65. It allows a remote attacker to bypass system access restrictions by tricking a user into visiting a specially crafted HTML page.

Impact Analysis

If exploited, this vulnerability could allow an attacker to bypass security restrictions on your system, potentially accessing restricted resources or performing unauthorized actions through a malicious webpage.

Mitigation Strategies

Update Google Chrome to version 152.0.7977.65 or later to address the incorrect authorization issue in WebProtect.

Hi! I’m here to help you understand CVE-2026-79077. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70