CVE-2026-79032: Improper input validation in Google Chrome

This vulnerability in Google Chrome's network component allows an attacker with control over the renderer process to bypass system access restrictions by exploiting improper input validation. The flaw is present in versions prior to 152.0.7977.65. The CVSS 3.1 vector indicates the attack requires network access, high attack complexity, no privileges, user interaction, and results in high confidentiality and integrity impact without availability impact. No known exploits are reported in the wild. The vendor has published an advisory linked to a stable channel update, implying a fix is available in version 152.0.7977.65.

Successful exploitation could allow an attacker who has already compromised the renderer process to bypass system access restrictions, potentially leading to unauthorized access to sensitive information or system components. The impact is rated medium severity with high confidentiality and integrity impact but no availability impact.

A fix is available in Google Chrome version 152.0.7977.65. Users and administrators should update to this version or later to remediate the vulnerability. Refer to the official Google Chrome stable channel update advisory for details: https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html