What is the CVSS score of EUVD-2026-79971?

EUVD-2026-79971 has a CVSS 3.1 base score of 5.1 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.1%.

Is there a patch available for EUVD-2026-79971?

Yes, a patch is available for EUVD-2026-79971. Update the affected software to the latest version immediately.

Google EUVD-2026-79971

| CVE-2026-91717 MEDIUM

Missing Authorization (CWE-862)

2026-09-15 chrome-cve-admin@google.com

GHSA-53r9-2m8c-q89h

Authentication Bypass Google

5.1

CVSS 3.1 · Vendor: google

Severity by source

Vendor (google) PRIMARY

5.1 MEDIUM

AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from Vendor (google) · only source for this CVE.

CVSS VectorVendor: google

Attack Vector

Local

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Sep 16, 2026 - 00:24 vuln.today

CVSS changed

Sep 16, 2026 - 00:22 NVD

5.1 (MEDIUM)

CVE Published

Sep 15, 2026 - 21:16 cve.org

UNKNOWN (no severity yet)

CVE Published

Sep 15, 2026 - 21:16 cve.org

MEDIUM 5.1

DescriptionCVE.org

Missing authorization in Android in Google Chrome on on Android prior to 153.0.8010.47 allowed a local attacker to obtain sensitive information via a co-installed app. (Chromium security severity: High)

AnalysisAI

Information disclosure in Google Chrome for Android before 153.0.8010.47 allows a locally installed app on the same device to retrieve sensitive browser data because an authorization check is missing on an Android-exposed Chrome component. The flaw is local-only and rated AC:H, giving a modest CVSS 3.1 base of 5.1 (AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) even though the confidentiality impact is complete; Google's Chromium team nevertheless classifies it as High severity. …