CVE-2026-17666

Katalog CVE

CVSS 9.1 · Critical EPSS 0,17%

Kerentanan Missing Cryptographic Step pada google chrome. Skor CVSS 3.1 9.1 (Critical) menurut CISA ADP.

Deskripsi (NVD)

Cryptographic Flaw in Enterprise in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to bypass discretionary access control via malicious network traffic. (Chromium security severity: High)

Rincian

Terbit di NVD

30 Juli 2026

Terakhir diubah

3 Agustus 2026

Status NVD

Analyzed

CVSS 3.1

9.1 (Critical), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-325: Missing Cryptographic Step

EPSS (30 hari)

0,17% peluang dieksploitasi; lebih tinggi dari 6,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html release notes · advisory vendor
• https://issues.chromium.org/issues/511761758 permissions required