CVE-2026-78954

Vendor

Google

Product

chrome, chromium

EPSS

0.003 (p19)

Exposure class

Browser, Operating system

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 36
   Advisory MSRC 28 Aug 2026

   Chromium: CVE-2026-78954 Incorrect authorization in Extensions

   Information published.

   Fix available CVE-2026-78954 Microsoft Google
2. 31
   Chrome release Chrome Releases 24d ago

   Long Term Support Channel Update for ChromeOS

   A new LTC version 150.0.7871.256 (Platform Version: 16700.66.0 ), is being rolled out for most ChromeOS devices. This version includes selected security fixes including: 533502257 High CVE-2026-85043 Incomplete cleanup in Network…

   CVE-2026-85043CVE-2026-102324CVE-2026-87499+40 more Google
3. 31
   Chrome release Chrome Releases 12 Sep 2026

   Long Term Support Channel Update for ChromeOS

   A new LTC version 150.0.7871.253 (Platform Version: 16700.63.0 ), is being rolled out for most ChromeOS devices. This version includes selected security fixes including: 501892500 High CVE-2026-79195 Use after free in Script…

   CVE-2026-79195CVE-2026-84349CVE-2026-78954+5 more Google
4. 23
   CVE NVD 25 Aug 2026

   Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to…

   Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity…

   CVE-2026-78954 Google