CVE-2026-79192: Improper input validation in Google Chrome

This vulnerability in Google Chrome's Variations component is due to improper input validation that could be exploited by a remote attacker to bypass the web origin policy. The issue affects versions before 152.0.7977.65. The web origin policy is a critical security mechanism that restricts how documents or scripts loaded from one origin can interact with resources from another origin. Bypassing this policy could lead to unauthorized access to web resources. The CVSS v3.1 base score is 4.3, indicating medium severity. There are no known exploits in the wild. The vendor advisory URL is provided but does not explicitly state patch availability in the input data.

Successful exploitation could allow an attacker to bypass the web origin policy, potentially enabling unauthorized access to web resources from different origins. The impact is limited to confidentiality (partial information disclosure) with no integrity or availability impact reported. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, and unchanged scope.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html for current remediation guidance. Users and administrators should monitor official Google Chrome release notes and update to version 152.0.7977.65 or later once confirmed patched. No other specific mitigations are provided in the available data.