Improper input validation in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process… (CVE-2026-79066)

CVE-2026-79066 is an improper input validation vulnerability in the navigation functionality of Google Chrome versions before 152.0.7977.65. This flaw enables a remote attacker, who already has control over the renderer process, to bypass the browser's site isolation security feature by leveraging a specially crafted HTML page. The vulnerability is classified under CWE-20 (Improper Input Validation) and has a CVSS v3.1 base score of 3.1, indicating low severity. There is no information about available patches or exploits in the wild.

The vulnerability allows bypassing site isolation, which is a security mechanism designed to separate different websites into distinct processes to prevent data leakage or cross-site attacks. However, exploitation requires prior compromise of the renderer process, limiting the attacker's capabilities. The impact is limited to confidentiality (partial bypass) with no integrity or availability effects reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor official Google Chrome security advisories for updates. Until a fix is available, minimizing exposure to untrusted content and maintaining updated security posture is advisable.