CVE-2026-79086 | Vulnetix

CVE-2026-79086 PUBLISHED CVSS 5.1 MEDIUM

Reported by Chrome · Published August 25, 2026

Missing authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain sensitive information via a co-installed app. (Chromium security severity: Medium)

Risk Scores

CVSS 3.1

5.1

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected Products

Vendor	Product	Versions
Google	Chrome	152.0.7977.65
wolfi	chromium	0, 0, 0
chainguard	chromium	0, 0, 0
Google	Chrome	152.0.7977.65, 152.0.7977.65

Timeline

Aug 25, 2026 Coalition ESS Score
Aug 25, 2026 CVE Published
Aug 26, 2026 EPSS Score
Aug 26, 2026 CVE Updated
Aug 27, 2026 EPSS Score
Sep 2, 2026 Security Advisory
Sep 24, 2026 EPSS Score

References

Open in Interactive Console →