CVE-2026-79201: Improper access control in Google Chrome

This vulnerability involves improper access control in the Workers feature of Google Chrome versions prior to 152.0.7977.65. An attacker can exploit this flaw by crafting a malicious HTML page that bypasses the web origin policy, potentially allowing unauthorized access to restricted web resources. The issue was assigned CVE-2026-79201 and is rated medium severity by Chromium security. The CVSS v3.1 base score is 4.3, reflecting a network attack vector with low complexity and no privileges required, but requiring user interaction. Confidentiality impact is low, with no integrity or availability impacts reported.

The vulnerability allows a remote attacker to bypass the web origin policy, which could lead to unauthorized access to some web resources or data that should be restricted by origin boundaries. However, the impact is limited to a low confidentiality breach with no integrity or availability impact. No known exploits in the wild have been reported.

A fix is available in Google Chrome version 152.0.7977.65. Users and administrators should update to this version or later to remediate the vulnerability. Refer to the official Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html for details.