CVE-2026-79055: Information leak in Google Chrome

CVE-2026-79055 is an information leak vulnerability in the Sharing component of Google Chrome on Android devices before version 152.0.7977.65. The vulnerability permits a local attacker who can leverage social engineering and a co-installed application to access sensitive information. The CVSS 3.1 base score is 5.1, reflecting a medium severity with attack vector local, high attack complexity, no privileges required, no user interaction, unchanged scope, and high confidentiality impact. The vulnerability does not affect integrity or availability. Google has released version 152.0.7977.65 to fix this issue.

The vulnerability allows a local attacker to obtain sensitive information from the affected device via the Sharing feature in Chrome on Android. The attacker must have a co-installed app and use social engineering techniques. There is no impact on integrity or availability, and no remote exploitation is indicated. The confidentiality impact is high, but the attack complexity is high and requires local access.

Users and administrators should update Google Chrome on Android to version 152.0.7977.65 or later, where this vulnerability is fixed. No additional mitigation steps are indicated by the vendor advisory. Since this is a local attack requiring social engineering and a co-installed app, applying the official update is the primary remediation.