CVE-2026-79262: Incorrect authorization in Google Chrome

An incorrect authorization vulnerability in the Network component of Google Chrome prior to version 152.0.7977.65 allows a remote attacker to bypass the web origin policy by crafting a malicious HTML page. This bypass could lead to limited information disclosure. The CVSS v3.1 base score is 4.3 (medium severity), reflecting a network attack vector with low complexity, no privileges required, and requiring user interaction. The impact is limited to confidentiality with no integrity or availability impact. The vendor advisory link is provided but does not explicitly state patch or remediation details.

The vulnerability allows a remote attacker to bypass the web origin policy, potentially exposing some confidential information from the browser context. There is no impact on data integrity or availability. No active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html for current remediation guidance. Users should update to version 152.0.7977.65 or later once confirmed. Until then, no specific mitigation actions are recommended by the vendor.