CVE-2026-84329: Google Google Chrome vulnerability

Q: What access does an attacker need to exploit this issue?

The attacker must first compromise the Chrome renderer process. The issue can then be triggered through a crafted HTML page to leak sensitive information.

Q: Which systems are affected?

The issue affects Google Chrome on Windows before version 152.0.7977.75. The provided information does not identify impacts on other operating systems.

Q: What is the remediation?

Update Google Chrome on Windows to version 152.0.7977.75 or later.

Published Sep 1, 2026

Updated

Confused deputy in CredentialProvider in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)

Affected Software

1 affected component

Google Google Chrome<152.0.7977.75

Event History

Sep 1, 2026

CVE Published

via MITRE·11:42 PM

Data Sourced

via MITRE·11:42 PM

DescriptionWeakness

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The attacker must first compromise the Chrome renderer process. The issue can then be triggered through a crafted HTML page to leak sensitive information.

Which systems are affected?

The issue affects Google Chrome on Windows before version 152.0.7977.75. The provided information does not identify impacts on other operating systems.

What is the remediation?

Update Google Chrome on Windows to version 152.0.7977.75 or later.