Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to… (CVE-2026-79065)

CVE-2026-79065 is an improper input validation vulnerability in the Network component of Google Chrome versions before 152.0.7977.65. It enables a remote attacker, who has compromised the renderer process, to bypass the web origin policy by using a specially crafted HTML page. The vulnerability is classified under CWE-20 (Improper Input Validation) and has a CVSS 3.1 base score of 4.3 (medium severity), indicating a limited confidentiality impact with no integrity or availability impact. There are no known exploits in the wild and no patch links or vendor advisories provided in the input data.

The vulnerability allows bypassing the web origin policy, potentially exposing some confidential information to an attacker who has already compromised the renderer process. It does not impact integrity or availability. The overall impact is limited to confidentiality and requires prior compromise of the renderer process.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users and administrators should monitor official Google Chrome security advisories for updates. Until a fix is available, limiting exposure of the renderer process and avoiding untrusted content may reduce risk.