Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper privilege management in Downloads in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to spoof address bar via a crafted HTML page. (Chromium security severity: Medium)
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
A severe vulnerability was disclosed for Google Chrome (CVE-2026-84358) https://vuldb.com/vuln/397978
Post summary
A severe vulnerability, CVE‑2026‑84358, affecting Google Chrome has been disclosed, with reference to a vulnerability database entry.
CVE-2026-84358 Improper privilege management in Downloads in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to spoof address… https://www.cve.org/CVERecord?id=CVE-2026-84358
Post summary
The text announces CVE-2026-84358, describing an improper privilege management flaw in Chrome’s Downloads that allows a compromised renderer process to spoof addresses, without providing PoC, exploit code, patches, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | chrome | - | - | - |