CVE-2026-79242: Observable discrepancy in Google Chrome
Description
CVE-2026-79242 is a medium severity vulnerability in Google Chrome prior to version 152.0.7977.65. It involves an observable discrepancy in HTML rendering that could allow a remote attacker to obtain sensitive information by crafting a malicious HTML page. The vulnerability does not affect integrity or availability but impacts confidentiality. No known exploits are reported in the wild. The vendor advisory linked does not explicitly confirm patch availability or remediation status.
CVSS v3.1
Score 5.3medium
Affected software
Chrome
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability in Google Chrome versions before 152.0.7977.65 allows a remote attacker to gain sensitive information through an observable discrepancy in HTML rendering. The issue is classified with a CVSS score of 5.3 (medium severity), indicating that the attack vector is network-based, requires high attack complexity, no privileges, and user interaction. The impact is confidentiality loss without integrity or availability impact. The vendor advisory is available but does not explicitly state the patch or remediation status.
Potential Impact
An attacker can remotely obtain sensitive information from a user by exploiting an HTML rendering discrepancy in affected Chrome versions. The vulnerability affects confidentiality only, with no impact on integrity or availability. No active exploitation is known at this time.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html for current remediation guidance. Users should update to Chrome version 152.0.7977.65 or later once confirmed patched. Until then, exercise caution when visiting untrusted websites.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- Chrome
- Date Reserved
- 2026-08-25T06:12:21.607Z
- State
- PUBLISHED
- Vendor Advisory Urls
- [{"url":"https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html","vendor":"Google"}]
Threat ID: 6a8df9e3acd9273b49ac729c
Added to database: 08/25/2026, 20:24:03 UTC
Last enriched: 09/10/2026, 13:23:13 UTC
Last updated: 10/08/2026, 06:48:19 UTC
Views: 44
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.