Description
Information leak in MediaCapture in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)
Published: 2026-09-01
Score: n/a
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability occurs in the MediaCapture component of Google Chrome. A crafted HTML page can trigger the component to expose sensitive information to a remote attacker. This is an information‑disclosure flaw classified as CWE‑200, allowing data leakage without requiring authentication or privileged access.

Affected Systems

Affected systems include any Google Chrome installation prior to version 152.0.7977.75. Users with older Chrome versions on the stable channel are at risk. The issue is reported for the desktop stable channel and has been addressed in releases after 152.0.7977.75.

Risk and Exploitability

The risk is medium as per Chromium's internal severity. Exploitation requires a user to visit or open a malicious web page that contains a crafted MediaCapture request. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. As a remote, client‑side vulnerability, patching by upgrading Chrome is the definitive mitigation.

Generated by OpenCVE AI on September 2, 2026 at 04:00 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update Google Chrome to version 152.0.7977.75 or newer to incorporate the fix.
  • For environments unable to upgrade immediately, disable MediaCapture for untrusted websites via Chrome policies or content settings.
  • Configure the browser’s permission settings to block media capture requests from sites that are not explicitly trusted.

Generated by OpenCVE AI on September 2, 2026 at 04:00 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 02 Sep 2026 04:15:00 +0000

Type Values Removed Values Added
Title Information Leak via MediaCapture in Google Chrome

Wed, 02 Sep 2026 03:15:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome

Wed, 02 Sep 2026 00:00:00 +0000

Type Values Removed Values Added
Description Information leak in MediaCapture in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)
Weaknesses CWE-200
References

Subscriptions

Google Chrome
cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published:

Updated: 2026-09-01T23:42:29.292Z

Reserved: 2026-09-01T16:21:02.186Z

Link: CVE-2026-84348

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-02T00:18:28.660

Modified: 2026-09-02T00:18:28.660

Link: CVE-2026-84348

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-02T04:00:09Z

Weaknesses
  • CWE-200

    Exposure of Sensitive Information to an Unauthorized Actor