Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to… (CVE-2026-79032)

CVE-2026-79032 is an input validation flaw in the Network module of Google Chrome versions before 152.0.7977.65. This vulnerability enables a remote attacker, who has compromised the renderer process, to bypass system access restrictions by leveraging a specially crafted HTML page. The issue is categorized under CWE-20 (Improper Input Validation) and has a CVSS 3.1 base score of 6.8, indicating a moderate impact. There are no known exploits in the wild and no explicit patch links provided in the data.

Successful exploitation allows an attacker with control over the renderer process to bypass system access restrictions, potentially increasing their ability to interact with system resources beyond intended limits. This could lead to elevated privileges or unauthorized actions within the context of the compromised renderer process. However, exploitation requires prior compromise of the renderer process and user interaction (UI required).

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users and administrators should monitor official Google Chrome security advisories for updates and apply the update to version 152.0.7977.65 or later once available.