CVE-2026-79185: Information leak in Google Chrome

CVE-2026-79185 is an information leak vulnerability in the Document Object Model (DOM) of Google Chrome before version 152.0.7977.65. It enables a remote attacker to bypass the web origin policy through a specially crafted HTML page. The web origin policy is a critical security mechanism that restricts how documents or scripts loaded from one origin can interact with resources from another origin. This vulnerability could allow unauthorized access to information that should be protected by the origin policy. The Chromium security team rates this vulnerability as medium severity.

The vulnerability allows unauthorized information disclosure by bypassing the web origin policy, potentially exposing sensitive data accessible within the browser context. There is no indication of integrity or availability impact. No active exploitation has been reported.

The vendor advisory link is provided but does not explicitly state the availability of a patch or official remediation. Since the vulnerability affects versions prior to 152.0.7977.65, updating to version 152.0.7977.65 or later is recommended if confirmed by the vendor advisory. Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html for current remediation guidance.