CVE-2026-79111: Improper input validation in Google Chrome

This vulnerability (CVE-2026-79111) affects Google Chrome versions before 152.0.7977.65 and stems from improper input validation in the Dawn component. Exploiting this flaw could enable remote code execution outside the sandbox environment via a specially crafted HTML page. The CVSS 3.1 base score is 9.6, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and high impact on confidentiality, integrity, and availability. The official Google Chrome release blog is referenced but does not explicitly state if the issue has been fixed or if a patch is available.

Successful exploitation could allow a remote attacker to execute arbitrary code outside the sandbox, compromising the security boundaries of the browser. This could lead to full system compromise including data theft, system manipulation, or denial of service. The vulnerability affects confidentiality, integrity, and availability at a high level.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html for current remediation guidance. Until confirmation of a fix, users should exercise caution when browsing untrusted sites and consider applying any available updates promptly once released.