CVE-2026-79057: Race condition in Google Chrome

CVE-2026-79057 is a race condition vulnerability in the Start component of Google Chrome on Android platforms before version 152.0.7977.65. Exploitation requires local access and social engineering to leverage a co-installed app to execute arbitrary code outside the sandbox environment. The vulnerability is rated with a CVSS 3.1 score of 8.1, indicating high impact on confidentiality, integrity, and availability. The vendor advisory link is provided but does not explicitly confirm patch availability or remediation level in the given data.

Successful exploitation could allow a local attacker to execute arbitrary code outside the sandbox, potentially compromising the security boundaries of the Chrome browser on Android. This could lead to full compromise of the affected application and possibly the device environment. The attack requires local access and social engineering, limiting remote exploitation.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html for current remediation guidance. Until official patches or updates are confirmed, users should exercise caution with co-installed apps and avoid social engineering attempts. Monitor official Google Chrome release notes for updates.