CVE-2026-79181: Observable discrepancy in Google Chrome

This vulnerability, identified as CVE-2026-79181, affects Google Chrome versions before 152.0.7977.65. It is caused by an observable discrepancy in the Glic component, which can be exploited by a remote attacker through a crafted HTML page to gain access to sensitive information. The CVSS 3.1 base score is 5.3, reflecting a medium severity with network attack vector, high attack complexity, no privileges required, and user interaction needed. The vulnerability impacts confidentiality but does not affect integrity or availability.

An attacker who successfully exploits this vulnerability can obtain sensitive information from the affected Chrome browser. The impact is limited to confidentiality, with no direct impact on integrity or availability. Exploitation requires user interaction and has a high attack complexity, reducing the likelihood of widespread exploitation.

A fixed version of Google Chrome is available at 152.0.7977.65. Users and administrators should update to this version or later to remediate the vulnerability. No additional mitigation steps are indicated by the vendor advisory. Patch status is not explicitly confirmed in the advisory, but the presence of the fixed version implies an official fix is available.