CVE-2026-79196: Race condition in Google Chrome

CVE-2026-79196 is a race condition vulnerability in the editing component of Google Chrome before version 152.0.7977.65. The flaw enables a remote attacker to leverage social engineering techniques combined with a specially crafted HTML page to access sensitive information. The CVSS 3.1 base score is 5.3, indicating medium severity, with attack vector network, high attack complexity, no privileges required, user interaction required, and impact on confidentiality only. The vulnerability is publicly disclosed but no official remediation level or patch is confirmed in the vendor advisory linked.

An attacker can remotely exploit this vulnerability by convincing a user to visit a maliciously crafted HTML page, potentially leading to unauthorized disclosure of sensitive information. There is no indication of impact on integrity or availability. The vulnerability requires user interaction and has a high attack complexity, which may limit exploitation.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html for current remediation guidance. Until an official fix is released, users should exercise caution with untrusted content and avoid interacting with suspicious links or pages.