CVE-2026-79234: Injection in Google Chrome

This vulnerability is an injection issue in the CSS handling of Google Chrome versions before 152.0.7977.65. A remote attacker could exploit this flaw by delivering a specially crafted HTML page that triggers the injection, potentially leading to unauthorized disclosure of sensitive information. The CVSS score is 6.5 (medium severity) with an attack vector of network, low attack complexity, no privileges required, user interaction required, unchanged scope, and high confidentiality impact. The vulnerability does not affect integrity or availability. The vendor advisory link is provided but does not explicitly confirm patch availability or remediation details in the input data.

Successful exploitation could allow an attacker to obtain sensitive information from the affected browser, impacting user confidentiality. There is no indication of impact on integrity or availability. No active exploitation in the wild is known at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html for current remediation guidance. Users should update to version 152.0.7977.65 or later once confirmed. Until then, exercise caution with untrusted HTML content and consider applying any official updates promptly.