CVE-2026-78907: Google Google Chrome vulnerability

Q: Which Chrome versions need to be updated?

Google Chrome versions prior to 152.0.7977.65 are affected. Update Chrome to 152.0.7977.65 or later.

Q: What does an attacker need to exploit this issue?

The attacker can be remote and uses a crafted HTML page. The available information does not state that local access or authentication is required.

Published Aug 25, 2026

Updated

Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)

Affected Software

1 affected component

Google Google Chrome<152.0.7977.65

Event History

Aug 25, 2026

CVE Published

via MITRE·08:10 PM

Data Sourced

via MITRE·08:10 PM

DescriptionWeakness

Frequently Asked Questions

Which Chrome versions need to be updated?

Google Chrome versions prior to 152.0.7977.65 are affected. Update Chrome to 152.0.7977.65 or later.

What does an attacker need to exploit this issue?

The attacker can be remote and uses a crafted HTML page. The available information does not state that local access or authentication is required.

CVE-2026-78907: Google Google Chrome vulnerability

Affected Software

Event History

Frequently Asked Questions

Which Chrome versions need to be updated?

What does an attacker need to exploit this issue?

Company

Resources

Contact

Frequently Asked Questions

Which Chrome versions need to be updated?

What does an attacker need to exploit this issue?