PT-2026-81703

CVE-2026-79123

Published

2026-08-25

Updated

2026-10-28

Description by

CVSS 3.1

6.5

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65

Description Improper input validation in the NTP Footer allows a remote attacker who has compromised the renderer process to bypass the web origin policy through a crafted HTML page. The web origin policy is a security mechanism that prevents scripts on one page from accessing data on another page unless they share the same origin.

Recommendations Update Google Chrome to version 152.0.7977.65 or later.

Exploitability

Fix

Impacts

Researchers

Orange Tsai

Orange_8361

Vendors

Affected products

Weakness enumeration

CWE-20: Improper Input Validation

Related identifiers