CVE-2026-79203: Improper input validation in Google Chrome

This vulnerability involves improper input validation in the DevTools feature of Google Chrome versions before 152.0.7977.65. An attacker with control over the renderer process can exploit this flaw to bypass site isolation, a security mechanism designed to separate web content from different origins. The vulnerability is rated with a CVSS 3.1 base score of 3.1, indicating low severity, and requires user interaction and high attack complexity.

The impact is limited to bypassing site isolation protections, which could potentially allow an attacker who has already compromised the renderer process to access data or code from other sites within the same browser instance. There is no indication of direct code execution or denial of service. The CVSS vector indicates low confidentiality impact and no integrity or availability impact.

A fix is available in Google Chrome version 152.0.7977.65. Users and administrators should update to this version or later to remediate the vulnerability. Refer to the official Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html for details.