What is the CVSS score of CVE-2026-79273?

CVE-2026-79273 has a CVSS 3.1 base score of 4.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N. EPSS exploitation probability: 0.2%.

Is there a patch available for CVE-2026-79273?

Yes, a patch is available for CVE-2026-79273. Update the affected software to the latest version immediately.

Chrome WebView CVE-2026-79273

EUVD-2026-66043 MEDIUM

Use of Incorrectly-Resolved Name or Reference (CWE-706)

2026-08-25 Chrome

GHSA-2x98-j3j5-6v6q

Google Authentication Bypass

4.3

CVSS 3.1 · Vendor: Chrome

Severity by source

Vendor (Chrome) PRIMARY

4.3 MEDIUM

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

vuln.today AI

4.3 MEDIUM

Network delivery of a crafted page (AV:N, AC:L, PR:N), passive user interaction required (UI:R), confidentiality-only partial impact with no scope change or write/availability effects.

3.1 AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (Chrome).

CVSS VectorVendor: Chrome

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Aug 27, 2026 - 23:00 vuln.today

CVSS changed

Aug 27, 2026 - 20:37 NVD

4.3 (MEDIUM)

CVE Published

Aug 25, 2026 - 20:10 cve.org

MEDIUM 4.3

CVE Published

Aug 25, 2026 - 20:10 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

Incorrect reference resolution in WebView in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)

AnalysisAI

Incorrect reference resolution in the WebView component of Google Chrome on Android (versions prior to 152.0.7977.65) enables a remote attacker to potentially bypass the web origin policy by delivering a crafted HTML page. The flaw carries a Chromium-internal severity of Low, consistent with the limited confidentiality-only impact (C:L/I:N/A:N) reflected in the CVSS 4.3 score. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Persist

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Persist

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	Exploitation requires that the victim is using Google Chrome on an Android device running a version prior to 152.0.7977.65. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	Real-world risk is low-to-moderate. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	Update Google Chrome on Android to version 152.0.7977.65 or later via the Google Play Store. … Detailed patch versions, workarounds, and compensating controls in full report.