CVE-2026-79075: Information leak in Google Chrome
Description
An information leak vulnerability exists in the Geolocation component of Google Chrome versions prior to 152.0.7977.65. This flaw allows a remote attacker to obtain sensitive information by tricking a user into visiting a crafted HTML page. The issue has been assigned a medium severity rating by Chromium security.
CVSS v3.1
Score 6.5medium
Affected software
Chrome
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-79075 is an information leak vulnerability in the Geolocation feature of Google Chrome before version 152.0.7977.65. A remote attacker can exploit this vulnerability by leveraging social engineering techniques to convince a user to visit a maliciously crafted HTML page, which then exposes sensitive information. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity level. The attack vector is network-based, requires no privileges, but user interaction is necessary. The confidentiality impact is high, while integrity and availability are not affected.
Potential Impact
Successful exploitation can lead to unauthorized disclosure of sensitive information related to the user's geolocation data. This could compromise user privacy but does not affect system integrity or availability. There are no known exploits in the wild at this time.
Mitigation Recommendations
A fixed version, 152.0.7977.65, has been released by Google. Users and administrators should update to this version or later to remediate the vulnerability. Refer to the official Google Chrome stable channel update announcement for details: https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- Chrome
- Date Reserved
- 2026-08-25T06:08:39.002Z
- State
- PUBLISHED
- Vendor Advisory Urls
- [{"url":"https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html","vendor":"Google"}]
Threat ID: 6a8df9cdacd9273b49ac6fe5
Added to database: 08/25/2026, 20:23:41 UTC
Last enriched: 09/10/2026, 15:34:42 UTC
Last updated: 10/08/2026, 06:48:19 UTC
Views: 29
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.