Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.5
CVE-2026-79125: Chrome and Chromium may expose data to attackers
CVE-2026-79125 · published 2 months ago
Summary
Versions of Google Chrome and the Chromium browser before version 152.0.7977.65 can unintentionally reveal private information when a specially crafted web page is visited. This could allow someone on the internet to see data that should remain hidden. Updating the browsers to the latest version fixes the issue.
What to do
- Update google chrome to version 152.0.7977.65 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | chrome | < 152.0.7977.65 | |
| Debian:11 | debian | chromium | All versions |
| Debian:12 | debian | chromium | All versions |
| Debian:13 | debian | chromium | All versions |
| Debian:14 | debian | chromium | All versions |
Original advisory text
Information leak in XR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)
Information leak in XR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-200Information Exposure
Timeline
Published25 Aug 2026
Updated4 Nov 2026
First seen26 Aug 2026
Track software like this
Free during beta