Improper input validation in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to… (CVE-2026-79214)

CVE-2026-79214 describes an input validation weakness in the Preload feature of Google Chrome before version 152.0.7977.65. An attacker with control over the renderer process can exploit this to bypass the web origin policy, potentially allowing unauthorized access to web resources. The vulnerability is classified under CWE-20 (Improper Input Validation) and has a CVSS v3.1 base score of 4.3, indicating a moderate impact primarily on confidentiality.

The vulnerability allows bypassing the web origin policy, which could lead to unauthorized access to web content from different origins. However, it requires prior compromise of the renderer process, limiting the attack scope. There is no impact on integrity or availability reported.

No explicit patch or remediation information is provided. Patch status is not yet confirmed — check the official Google Chrome security advisories for updates and remediation guidance. Users should update to version 152.0.7977.65 or later once available to address this issue.