CVE-2026-79025: Improper input validation in Google Chrome

This vulnerability in Google Chrome's Workers component is caused by improper input validation. An attacker who has already compromised the renderer process can exploit this flaw by delivering a specially crafted HTML page to bypass system access restrictions. The issue affects Chrome versions prior to 152.0.7977.65. The CVSS vector indicates network attack vector, high attack complexity, no privileges required, user interaction required, unchanged scope, and low confidentiality and integrity impact with no availability impact.

Successful exploitation allows bypassing system access restrictions, potentially enabling further unauthorized actions within the compromised renderer process context. The impact is limited to confidentiality and integrity with low severity and does not affect availability. There are no known exploits in the wild at this time.

The vendor advisory linked does not explicitly confirm a patch or remediation status. Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html for current remediation guidance. Users should update to Chrome version 152.0.7977.65 or later once confirmed as fixed by the vendor.