Improper input validation in FindInPage in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process… (CVE-2026-79272)

CVE-2026-79272 is a vulnerability in Google Chrome's FindInPage component affecting versions prior to 152.0.7977.65. The flaw involves improper input validation that enables a remote attacker, with control over the renderer process, to leak data from other origins by crafting a malicious HTML page. This issue is categorized under CWE-20 (Improper Input Validation) and has been assigned a low severity level by Chromium's security team.

The vulnerability allows information disclosure of cross-origin data if an attacker has already compromised the renderer process. It does not impact integrity or availability and requires user interaction with a crafted page. The CVSS score is 3.1, reflecting low impact with network attack vector, high attack complexity, no privileges required, and user interaction needed.

A fix is available in Google Chrome version 152.0.7977.65. Users and administrators should update to this version or later to remediate the vulnerability. No additional mitigation steps are indicated by the vendor advisory.