PT-2026-84568 · Google · Google Chrome

CVE-2026-84358

·

Published

2026-09-01

·

Updated

2026-09-08

CVSS v3.1

4.2

Medium

VectorAV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.75
Description Improper privilege management in the Downloads component allows a remote attacker who has already compromised the renderer process to spoof the address bar by using a specially crafted HTML page.
Recommendations Update Google Chrome to version 152.0.7977.75 or later.

Fix

Improper Privilege Management

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-84358
ECHO-F714-5C26-4C97
OPENSUSE-SU-2026:11714-1
OPENSUSE-SU-2026:21799-1

Affected Products

Google Chrome