CVE-2026-79003: Incorrect authorization in Google Chrome

This vulnerability involves incorrect authorization in the Device component of Google Chrome versions before 152.0.7977.65. An attacker can exploit this flaw remotely by leveraging social engineering techniques to bypass system access restrictions via a specially crafted HTML page. The CVSS v3.1 base score is 4.3, indicating medium severity, with attack vector network, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or availability impact, and limited integrity impact.

The vulnerability allows an attacker to bypass system access restrictions on the affected Chrome versions, potentially enabling unauthorized actions that affect the integrity of the system. There is no impact on confidentiality or availability. Exploitation requires user interaction through social engineering. No known exploits are reported in the wild.

A fix is available in Google Chrome version 152.0.7977.65. Users and administrators should update to this version or later to remediate the vulnerability. Refer to the official Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html for details.