CVE-2026-79124

Analyzed Analyzed - Analysis Complete

Information Leak in Google Chrome on Android

Publication date: 2026-08-25

Last updated on: 2026-08-27

Assigner: Chrome

Description

Information leak in Intents in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-25

Last Modified

2026-08-27

Generated

2026-09-15

AI Q&A

2026-08-26

EPSS Evaluated

2026-09-13

NVD

CVE-2026-79124

Affected Vendors & Products

Vendor	Product	Version / Range
google	chrome	to 152.0.7977.65 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

Executive Summary

This vulnerability is an information leak in Intents within Google Chrome on Android. It allows a remote attacker to access sensitive data through a specially crafted HTML page. The issue was present in versions of Chrome prior to 152.0.7977.65.

Detection Guidance

This vulnerability involves an information leak in Intents in Google Chrome on Android. Detection requires checking the Chrome version on affected devices. If the version is prior to 152.0.7977.65, the system is vulnerable. Use the command 'dumpsys package com.android.chrome | grep version' on Android to check the installed Chrome version.

Impact Analysis

If exploited, this vulnerability could allow an attacker to steal sensitive information from your device through Chrome. This might include personal data, login credentials, or other confidential details if you visit a malicious webpage.

Compliance Impact

This vulnerability involves an information leak in Google Chrome on Android, which could expose sensitive user data. Such leaks may violate GDPR's data protection principles or HIPAA's confidentiality requirements if personal or health data is involved.

Mitigation Strategies

Update Google Chrome on Android to version 152.0.7977.65 or later to address the information leak vulnerability.

Hi! I’m here to help you understand CVE-2026-79124. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70