Improper input validation in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and… (CVE-2026-78943)

CVE-2026-78943 describes an improper input validation vulnerability in the Editing functionality of Google Chrome before version 152.0.7977.65. Exploitation requires that the attacker has already compromised the renderer process and uses social engineering techniques to bypass the web origin policy by delivering a specially crafted HTML page. The vulnerability is classified under CWE-20 (Improper Input Validation) and has a low impact on confidentiality with no impact on integrity or availability.

The vulnerability allows a remote attacker with control over the renderer process to bypass the web origin policy, potentially leading to limited information disclosure. There is no impact on data integrity or availability. The overall severity is low, reflecting the limited scope and complexity of exploitation.

A fix is available in Google Chrome version 152.0.7977.65 and later. Users and administrators should update to this version or newer to remediate the vulnerability. No additional mitigation steps are indicated.