CVE-2026-79182: Improper input validation in Google Chrome

This vulnerability arises from improper input validation in the Media component of Google Chrome versions before 152.0.7977.65. An attacker can exploit this by crafting a malicious HTML page that triggers arbitrary code execution outside the sandbox environment, potentially compromising the host system. The CVSS 3.1 vector indicates the attack can be performed remotely without privileges, requires user interaction, and results in high impact on confidentiality, integrity, and availability.

Successful exploitation could lead to arbitrary code execution outside the sandbox, allowing an attacker to fully compromise the affected system. This impacts confidentiality, integrity, and availability of the system running the vulnerable Chrome version.

The vendor has published a stable channel update advisory for Chrome. Although explicit patch availability is not confirmed in the provided data, the advisory URL suggests that updating to Chrome version 152.0.7977.65 or later addresses the issue. Users should update to the latest stable Chrome release to mitigate this vulnerability. Patch status is not yet confirmed explicitly; check the vendor advisory for current remediation guidance.