PT-2026-81604 · Google · Google Chrome

CVE-2026-79006

·

Published

2026-08-25

·

Updated

2026-09-01

CVSS v3.1

4.3

Medium

VectorAV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65
Description A protection mechanism failure in HttpsUpgrades allows a remote attacker to bypass the web origin policy through the use of crafted network traffic. The web origin policy is a security measure that restricts how a document or script loaded from one origin can interact with a resource from another origin.
Recommendations Update Google Chrome to version 152.0.7977.65 or later.

Fix

DoS

Protection Mechanism Failure

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-79006
ECHO-556F-4BDD-4E2B
OPENSUSE-SU-2026:11628-1
OPENSUSE-SU-2026:21724-1

Affected Products

Google Chrome