CVE-2026-79033: Insufficient control flow management in Google Chrome

This vulnerability in Google Chrome's DevTools component allows insufficient control flow management, which can be exploited by a remote attacker through social engineering. By convincing a user to visit a specially crafted HTML page, the attacker could potentially execute arbitrary code within the sandbox environment. The issue affects Chrome versions prior to 152.0.7977.65. The CVSS 3.1 vector indicates the attack requires network access, no privileges, user interaction, and impacts confidentiality, integrity, and availability at a high level.

Successful exploitation could lead to arbitrary code execution inside the sandbox, compromising the confidentiality, integrity, and availability of the affected system. This could allow attackers to perform actions with the privileges of the sandboxed environment, potentially leading to further compromise depending on sandbox escape mitigations.

A fix is available in Google Chrome version 152.0.7977.65. Users and administrators should update to this version or later to remediate the vulnerability. The vendor advisory linked provides official confirmation of the update. No additional mitigation steps are specified or required beyond applying the update.