Improper input validation in Autofill in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive… (CVE-2026-79288)

CVE-2026-79288 is an input validation vulnerability in the Autofill component of Google Chrome on Android platforms before version 152.0.7977.65. Improper validation of input data allows a remote attacker to craft malicious HTML pages that can extract sensitive information from the browser's Autofill functionality. The vulnerability is classified under CWE-20 (Improper Input Validation) and has a moderate severity rating according to the Chromium security team. No known exploits are reported in the wild, and no patch links or vendor advisories are provided in the available data.

Successful exploitation of this vulnerability could lead to unauthorized disclosure of sensitive information stored or managed by the Autofill feature in Google Chrome on Android. The attacker does not require privileges and only needs user interaction (UI required). The vulnerability does not impact integrity or availability but compromises confidentiality.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users should monitor official Google Chrome security advisories and update to version 152.0.7977.65 or later once available to mitigate this vulnerability.