Long Term Support Channel Update for ChromeOS (9 CVEs)

Published September 10, 2026 CVE-2026-79010

A Google Chrome flaw can let an attacker evade rules separating websites. The attacker must first compromise Chrome's webpage-handling process.

Severity
MediumCVSS 3.1 · 4.3
Fix
Fixed in 152.0.7977.65
Affected versions
before 152.0.7977.65
Weakness
CWE-672
Exploit likelihood
0.38% in 30 daysEPSS, higher than 31% of known flaws
Affects
Chrome
Exploited
Not confirmedNo confirmation recorded
CISA SSVC
No known exploitationAutomatable: no · Technical impact: partial
EU ID
EUVD-2026-65843ENISA vulnerability database

How it works

  • The attacker must first compromise the Chrome process handling a webpage.
  • They then use a specially built HTML page.
  • Chrome's network code can reuse something after it should be discarded.
  • That mistake lets the page evade rules that keep websites separate.

What to do

If you use Google Chrome, check its installed version against 152.0.7977.65. Treat any lower version as affected by this advisory.

Update Google Chrome to 152.0.7977.65 or later. Verify the installed version reaches that number after updating.

Technical details

CVE-2026-79010 is a resource lifetime error in Chrome's Network component. It requires prior renderer compromise and a crafted HTML page. The flaw then permits bypassing web origin policy, which normally keeps websites separated. Google rates it Medium severity. Chrome versions older than 152.0.7977.65 are affected.

Severity breakdown

  • Attack vector Network Requires network access to the vulnerable service
  • Attack complexity Low Low complexity under the assessed conditions
  • Privileges required None Attacker needs no account or login
  • User interaction Required Requires another user to take an action
  • Scope Unchanged Impact stays within the same security authority
  • Confidentiality impact Low Some data can be read
  • Integrity impact None No data tampering
  • Availability impact None No availability impact
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N Open in FIRST.org calculator

References

View Original Source