Improper input validation in Network in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering… (CVE-2026-79253)

CVE-2026-79253 is an input validation vulnerability in the Network component of Google Chrome on Windows platforms before version 152.0.7977.65. The flaw enables a remote attacker to leak sensitive information by tricking a user into interacting with a maliciously crafted HTML page. The vulnerability is classified under CWE-20 (Improper Input Validation) and has a CVSS 3.1 base score of 6.5, indicating a medium severity. Exploitation requires user interaction (UI:R), no privileges are needed (PR:N), and the attack vector is network-based (AV:N). There are no known exploits in the wild and no official patch links provided in the data.

Successful exploitation can lead to the disclosure of sensitive information without impacting system integrity or availability. The attacker must convince the user to interact with a malicious HTML page, which then causes information leakage. There is no indication of code execution or system compromise from this vulnerability.

A fix is available in Google Chrome version 152.0.7977.65 and later. Users and administrators should update affected Chrome installations on Windows to this version or newer to remediate the vulnerability. Since no vendor advisory or patch link was provided, verify the patch status with official Google Chrome security advisories before deployment.