Improper input validation in Cookies in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to… (CVE-2026-79260)

CVE-2026-79260 is an input validation vulnerability in the cookie handling mechanism of Google Chrome versions before 152.0.7977.65. An attacker with control over the renderer process can exploit this flaw to bypass the web origin policy, potentially accessing sensitive information across origins. The vulnerability is classified under CWE-20 (Improper Input Validation) and has a CVSS 3.1 base score of 6.5, indicating a medium severity. There are no known exploits in the wild, and no patch links or vendor advisories are provided in the input data.

The vulnerability allows an attacker who has already compromised the renderer process to bypass the web origin policy, which can lead to unauthorized access to sensitive information from other web origins. The confidentiality of data is impacted, but there is no impact on integrity or availability. The overall severity is moderate.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or remediation details are provided, users should monitor official Google Chrome security advisories for updates and apply updates promptly once available.