EUVD-2026-65833
GHSA-h77h-pwjg-fw85
Severity by source
AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
Renderer compromise prerequisite is accurately captured by AC:H; PR:N is appropriate as no system credential or privilege is required for the authorization bypass itself.
Primary rating from Vendor (Chrome).
CVSS VectorVendor: Chrome
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
Lifecycle Timeline
4DescriptionCVE.org
Missing authorization in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
AnalysisAI
Missing authorization in the WebAppInstalls component of Google Chrome for Android (prior to 152.0.7977.65) enables an attacker who has already achieved renderer process compromise to extract sensitive information by issuing crafted IPC requests that bypass browser-process authorization checks. This is a chained exploit primitive rather than a standalone attack - it elevates a pre-existing renderer compromise into an unauthorized data disclosure. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Two conditions must be met simultaneously for exploitation: the target must be running Google Chrome on Android prior to version 152.0.7977.65, and the attacker must have ALREADY achieved code execution inside Chrome's renderer process via a separate, distinct vulnerability - the WebAppInstalls authorization bypass is not independently exploitable from a standard web attacker position. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 score of 5.3 (Medium) with vector AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N reflects the chained, multi-step nature of this attack. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker first leverages a separate renderer-level vulnerability in Chrome for Android to achieve code execution within the sandboxed renderer process, then serves a crafted HTML page that causes the compromised renderer to invoke the WebAppInstalls IPC path without triggering a valid authorization check in the browser process, resulting in sensitive information being returned to the attacker-controlled renderer context. No public proof-of-concept has been identified for this specific authorization bypass at time of analysis. |
| Remediation | Update Google Chrome for Android to version 152.0.7977.65 or later, which contains the vendor-released fix per the stable channel advisory at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-862 – Missing Authorization
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today