PT-2026-81528 · Google · Google Chrome

CVE-2026-78897

·

Published

2026-08-25

·

Updated

2026-09-01

CVSS v3.1

6.5

Medium

VectorAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65
Description Missing authorization in BrowserTag allows a remote attacker to obtain sensitive information through the use of a crafted Chrome extension, provided the attacker can leverage social engineering.
Recommendations Update Google Chrome to version 152.0.7977.65 or later.

Fix

Missing Authorization

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-78897
ECHO-4EF5-FCF5-AD3F
OPENSUSE-SU-2026:11628-1
OPENSUSE-SU-2026:21724-1

Affected Products

Google Chrome