CVE-2026-79258

ADVISORY - nist

Summary

Incorrect authorization in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

EPSS Score⁠: 0.00305 (0.227)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-863⁠

Incorrect Authorization

ADVISORY - redhat

CWE-346⁠

Origin Validation Error

Impacted images

Advisories

Debian

CREATED

8 days ago

UPDATED

7 hours ago

ADVISORY IDCVE-2026-79258⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Package	Type	OS Name	OS Version	Affected Ranges	Fix Versions
debian/chromium	deb	debian	14	>0	Not yet available
debian/chromium	deb	debian	12	<152.0.7977.75-1~deb12u1	152.0.7977.75-1~deb12u1
debian/chromium	deb	debian	13	<152.0.7977.75-1~deb13u1	152.0.7977.75-1~deb13u1
debian/chromium	deb	debian	unstable	<152.0.7977.64-1	152.0.7977.64-1

Severity and metrics

No CVSS data available from this advisory.

NIST

CREATED

9 days ago

UPDATED

4 days ago

ADVISORY IDCVE-2026-79258⁠

EXPLOITABILITY SCORE

2.8

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-863⁠

CVSS SCORE

6.5medium

Ubuntu

CREATED

7 days ago

UPDATED

2 days ago

ADVISORY IDCVE-2026-79258⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

Red Hat

CREATED

9 days ago

UPDATED

8 days ago

ADVISORY IDCVE-2026-79258⁠

EXPLOITABILITY SCORE

2.8

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-346⁠

CVSS SCORE

6.5medium

Chainguard

CREATED

6 hours ago

UPDATED

6 hours ago

ADVISORY ID

CGA-273c-p6g4-cgpw

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

2 days ago

UPDATED

2 days ago

ADVISORY ID

MINI-xpxh-g2mp-m45j

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY