EUVD-2026-65906
GHSA-grjj-4c75-rhrf
Severity by source
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Network-delivered via crafted Sync traffic with no attacker authentication (PR:N), but AC:H reflects required MitM positioning; only confidentiality is impacted.
Primary rating from Vendor (Chrome).
CVSS VectorVendor: Chrome
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Lifecycle Timeline
4DescriptionCVE.org
Improper input validation in Sync in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic. (Chromium security severity: Medium)
AnalysisAI
Sensitive information disclosure in Google Chrome's Sync component (versions prior to 152.0.7977.65) allows remote unauthenticated attackers to extract synchronized user data via crafted network traffic. The flaw stems from improper input validation (CWE-20) in the Sync subsystem, which handles cross-device synchronization of browser data including passwords, history, and tokens. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires Chrome Sync to be enabled and actively communicating with Google's Sync backend - the default state for any Chrome user signed into a Google account. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | CVSS 5.9 (Medium) is calibrated by the AC:H constraint against an otherwise permissive attack profile (AV:N, PR:N, UI:N). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker with man-in-the-middle positioning on a network traversed by a victim's Chrome Sync traffic - such as a rogue Wi-Fi access point or a compromised network segment - crafts malformed Sync protocol messages that bypass input validation. The Chrome client processes the adversarial payload, and improperly validated data paths expose sensitive synchronized content such as saved passwords or session tokens back to the attacker. … |
| Remediation | Vendor-released patch: Google Chrome 152.0.7977.65. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-20 – Improper Input Validation
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today