PT-2026-81636
CVE-2026-79042
·
Published
2026-08-25
·
Updated
2026-10-28
Description by
CVSS 3.1
4.3
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Google Chrome on Android versions prior to 152.0.7977.65
Description
Missing authorization in the Payments component allows a remote attacker to potentially bypass system access restrictions. This is achieved by leveraging social engineering and directing the user to a crafted HTML page.
Recommendations
Update Google Chrome on Android to version 152.0.7977.65 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾