Improper input validation in Input in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and… (CVE-2026-79106)

CVE-2026-79106 is an improper input validation vulnerability in Google Chrome versions before 152.0.7977.65. It enables a remote attacker, who already controls the renderer process, to bypass the web origin policy by tricking the user with a crafted HTML page. This flaw is classified under CWE-20 (Improper Input Validation) and has a moderate security impact as per Chromium's assessment.

The vulnerability allows bypassing the web origin policy, which could lead to unauthorized access to web resources or data that should be restricted by origin boundaries. However, exploitation requires prior compromise of the renderer process and user interaction via social engineering. There is no indication of direct code execution or denial of service. The CVSS score of 4.3 reflects limited confidentiality impact and no integrity or availability impact.

No official patch or fix information is currently available. Users should update to Google Chrome version 152.0.7977.65 or later once it is released to remediate this issue. Until then, be cautious of social engineering attempts and avoid interacting with suspicious web content. Monitor official Google Chrome security advisories for updates on remediation.