What is the CVSS score of EUVD-2026-61228?

EUVD-2026-61228 has a contested CVSS base score of 6.5 from a third party (e.g. CISA-ADP), while the vendor rates it Medium. vuln.today uses the vendor rating as authoritative.

Is there a patch available for EUVD-2026-61228?

Yes, a patch is available for EUVD-2026-61228. Update the affected software to the latest version immediately.

Google Chrome Android EUVD-2026-61228

| CVE-2026-76039 MEDIUM

Use of Incorrectly-Resolved Name or Reference (CWE-706)

2026-08-18 chrome-cve-admin@google.com

GHSA-9qwq-rv7x-2c2h

Google Information Disclosure Red Hat Suse

Medium

Disputed · 6.5 Vendor: google

Severity by source

Sources disagree (Medium–Critical)

Vendor (google) PRIMARY

6.5 MEDIUM

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

vuln.today AI

6.5 MEDIUM

Network-delivered via HTML with no auth required; user must visit the page (UI:R); confidentiality-only impact with no integrity or availability effect; scope unchanged as exploit stays within browser context.

3.1 AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

SUSE

CRITICAL

qualitative

Red Hat

7.1 HIGH

qualitative

vuln.today treats the vendor’s rating as authoritative. A higher third-party CVSS (e.g. CISA-ADP) is shown for transparency but does not drive the headline severity.

CVSS VectorVendor: google

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Aug 19, 2026 - 12:30 vuln.today

CVSS changed

Aug 19, 2026 - 12:23 NVD

6.5 (MEDIUM)

CVE Published

Aug 18, 2026 - 21:18 cve.org

MEDIUM 6.5

CVE Published

Aug 18, 2026 - 21:18 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

Incorrect reference resolution in Core in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: High)

AnalysisAI

Incorrect reference resolution in the Core component of Google Chrome on Android exposes sensitive information to remote attackers who can socially engineer users into visiting a malicious HTML page. Affected versions are all Chrome for Android builds prior to 151.0.7922.169. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Delivery

Craft malicious HTML page exploiting reference resolution flaw

Exploit

Social engineer victim via phishing or malicious link

Execution

Victim opens page in Chrome on Android device

Persist

Incorrect reference resolution exposes sensitive data

Impact

Data exfiltrated to attacker server

Access

Delivery

Craft malicious HTML page exploiting reference resolution flaw

Exploit

Social engineer victim via phishing or malicious link

Execution

Victim opens page in Chrome on Android device

Persist

Incorrect reference resolution exposes sensitive data

Impact

Data exfiltrated to attacker server

Vulnerability AssessmentAI

Exploitation	Exploitation requires the victim to be running Google Chrome on an Android device with a version prior to 151.0.7922.169. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS 3.1 base score of 6.5 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) reflects a medium-severity information disclosure. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An attacker registers a domain and serves a crafted HTML page designed to trigger Chrome's incorrect reference resolution on Android. The attacker then sends the link to a target via phishing email, SMS, or social media, convincing them to open it in Chrome on their Android device. …
Remediation	Update Google Chrome for Android to version 151.0.7922.169 or later via the Google Play Store or the browser's internal update mechanism. … Detailed patch versions, workarounds, and compensating controls in full report.