Incorrect authorization in GetUserMedia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a… (CVE-2026-79134)

CVE-2026-79134 is an authorization bypass vulnerability in the GetUserMedia API of Google Chrome versions before 152.0.7977.65. This flaw enables a remote attacker to obtain sensitive information by crafting a malicious HTML page that triggers the improper authorization check. The vulnerability has a CVSS 3.1 score of 6.5 (medium severity), with an attack vector of network, low attack complexity, no privileges required, user interaction required, and impacts confidentiality only. There are no known exploits in the wild. No patch information is provided in the source data.

An attacker can remotely obtain sensitive information from a victim's browser by exploiting incorrect authorization in the GetUserMedia API. The vulnerability does not affect system integrity or availability and requires user interaction to be exploited. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users and administrators should monitor official Google Chrome security advisories for updates and apply the fix once it is released. Until then, exercising caution with untrusted web content and limiting user interaction with suspicious sites may reduce risk.