CVE-2026-79090: Improper privilege management in Google Chrome

This vulnerability involves improper privilege management in the Actor component of Google Chrome versions before 152.0.7977.65. An attacker can exploit this flaw remotely by tricking a user via a crafted HTML page to bypass system access restrictions, potentially gaining elevated privileges. The CVSS 3.1 base score is 9.8, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. The vendor advisory is available but does not explicitly state if a fix has been released.

Successful exploitation could allow a remote attacker to bypass system access restrictions, leading to full compromise of confidentiality, integrity, and availability of the affected system. This could result in unauthorized access and control over the victim's system.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html for current remediation guidance. Until official confirmation of a fix, users should exercise caution with untrusted HTML content and avoid social engineering attempts.