CVE-2026-78961: Google Google Chrome vulnerability

Q: What must an attacker achieve before exploiting this issue?

The attacker must first compromise the Chrome renderer process and then use social engineering to get the victim to interact with a crafted HTML page. This is not described as a standalone attack against an uncompromised browser.

Q: What security boundary can be bypassed?

Successful exploitation can bypass the web origin policy, allowing actions or access that should be restricted by same-origin isolation.

Q: Which Chrome versions are affected?

Google Chrome versions prior to 152.0.7977.65 are affected. Updating to 152.0.7977.65 or later addresses the affected version range described.

Published Aug 25, 2026

Updated

Incorrect authorization in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

Affected Software

1 affected component

Google Google Chrome<152.0.7977.65

Event History

Aug 25, 2026

CVE Published

via MITRE·08:10 PM

Data Sourced

via MITRE·08:10 PM

DescriptionWeakness

Frequently Asked Questions

What must an attacker achieve before exploiting this issue?

The attacker must first compromise the Chrome renderer process and then use social engineering to get the victim to interact with a crafted HTML page. This is not described as a standalone attack against an uncompromised browser.

What security boundary can be bypassed?

Successful exploitation can bypass the web origin policy, allowing actions or access that should be restricted by same-origin isolation.

Which Chrome versions are affected?

Google Chrome versions prior to 152.0.7977.65 are affected. Updating to 152.0.7977.65 or later addresses the affected version range described.

CVE-2026-78961: Google Google Chrome vulnerability

Affected Software

Event History

Frequently Asked Questions

What must an attacker achieve before exploiting this issue?

What security boundary can be bypassed?

Which Chrome versions are affected?

Company

Resources

Contact

Frequently Asked Questions

What must an attacker achieve before exploiting this issue?

What security boundary can be bypassed?

Which Chrome versions are affected?