CVE-2026-79109: Improper input validation in Google Chrome

This vulnerability in Google Chrome relates to improper input validation in the printing component. Specifically, it allows a remote attacker with control over the renderer process to potentially execute arbitrary code outside the sandbox environment by leveraging a crafted HTML page. The issue affects versions prior to 152.0.7977.65. The CVSS v3.1 base score is 8.3, indicating high severity with network attack vector, high impact on confidentiality, integrity, and availability, and requiring user interaction with high attack complexity.

Successful exploitation could lead to arbitrary code execution outside the sandbox, compromising the security boundaries of the browser. This could result in full system compromise depending on the privileges of the Chrome process. The vulnerability requires that the attacker already has control over the renderer process and user interaction is needed to trigger the exploit.

The vendor advisory link is provided but does not explicitly confirm patch availability or remediation level. Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html for current remediation guidance. Until a patch is confirmed, users should exercise caution when interacting with untrusted web content, especially involving printing operations.