GoogleCVE-2026-79088

Google Chrome: improper authorization

CVE-2026-79088 · Published Aug 25, 2026 · updated Aug 31, 2026

Medium6.5

Fix: upgrade to 152.0.7977.65 or later

Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

Affected versions

Package	Affected	Fixed in
Chrome Product	>= 152.0.7977.65, < 152.0.7977.65	152.0.7977.65

Details and references

CVSS 3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Severity from: NVD
Weakness: CWE-863

More Google advisories

All Google

Low 3.1Aug 25

Improper control of a resource through its lifetime in Workers in Google Chrome...CVE-2026-79289fixed in 152.0.7977.65 Critical 9.6Aug 25

Google Chrome: use after freeCVE-2026-79290fixed in 152.0.7977.65 Medium 6.5Aug 25

Google Chrome: information disclosureCVE-2026-79291fixed in 152.0.7977.65 High 8.3Aug 25

Google Chrome: integer overflowCVE-2026-79292fixed in 152.0.7977.65 Medium 6.5Aug 25

Google Chrome: information disclosureCVE-2026-79293fixed in 152.0.7977.65 Critical 9.6Aug 25

Google Chrome: use after freeCVE-2026-79275fixed in 152.0.7977.65