CVE-2026-79126CWE-684

CVE-2026-79126

Medium · published August 26, 2026

CVSS v3.1
5.9
EPSS
0%
Percentile
13.7
In the wild
Unconfirmed
What it is

Incorrect provision of specified functionality in Proxy in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially obtain sensitive information via crafted network traffic. (Chromium security severity: Low)

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00229 · 13.7th percentile
Weakness
CWE-684 · Incorrect Provision of Specified Functionality
Published
2026-08-26T01:18Z
Affected products (1)
ProductVersionsFixed in
google/chrome< 152.0.7977.65152.0.7977.65
References (2)
https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html · [email protected]https://issues.chromium.org/issues/533408915 · [email protected]
EPSS history
Timeline
  • 27 AUG 06:46Z
    EPSS moved — → 0%
    epss
  • 25 AUG 20:10Z
    Incorrect provision of specified functionality in Proxy in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially…
    cvelistv5