PT-2026-84568
CVE-2026-84358
·
Published
2026-05-17
·
Updated
2026-10-28
Description by
CVSS 3.1
4.2
MediumMetricsAV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 152.0.7977.75
Description
Improper privilege management in the Downloads component allows a remote attacker who has already compromised the renderer process to spoof the address bar by using a specially crafted HTML page.
Recommendations
Update Google Chrome to version 152.0.7977.75 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾