CVE-2026-79042: Missing authorization in Google Chrome
Description
A missing authorization vulnerability exists in the Payments component of Google Chrome on Android versions prior to 152.0.7977.65. This flaw allows a remote attacker to potentially bypass system access restrictions by tricking a user into visiting a crafted HTML page. The vulnerability has a medium severity rating and does not impact confidentiality or availability but may allow limited integrity violations.
CVSS v3.1
Score 4.3medium
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-79042 describes a missing authorization issue in the Payments feature of Google Chrome on Android platforms before version 152.0.7977.65. An attacker can leverage social engineering to craft a malicious HTML page that bypasses system access restrictions, exploiting the lack of proper authorization checks. The vulnerability is classified under CWE-862 (Missing Authorization) and has a CVSS v3.1 base score of 4.3 (medium severity). No known exploits are reported in the wild, and no official patch or vendor advisory links are provided in the data.
Potential Impact
The vulnerability allows an attacker to bypass system access restrictions via social engineering, potentially leading to limited integrity impact. There is no impact on confidentiality or availability. The attack requires user interaction (UI required) and can be executed remotely over the network without privileges.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users should update Google Chrome on Android to version 152.0.7977.65 or later once an official fix is released. Until then, exercising caution with untrusted links and pages is advised.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-wfcv-c85x-wmx4
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-79042"]
- Database Specific Severity
- MODERATE
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6a92f810acd9273b49e90ccc
Added to database: 08/29/2026, 15:17:36 UTC
Last enriched: 09/09/2026, 18:53:59 UTC
Last updated: 10/11/2026, 18:48:22 UTC
Views: 31
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.