Improper input validation in Sync in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted… (CVE-2026-79013)

CVE-2026-79013 describes an improper input validation vulnerability in the Sync feature of Google Chrome before version 152.0.7977.65. This flaw enables a remote attacker to craft network traffic that can lead to unauthorized disclosure of sensitive information. The vulnerability is classified under CWE-20 (Improper Input Validation) and has a CVSS 3.1 base score of 5.9, indicating moderate severity. There is no indication of known exploits in the wild. No patch links or vendor advisories are provided in the data, and the affected versions are not explicitly enumerated.

A remote attacker can exploit this vulnerability to obtain sensitive information from the affected Chrome Sync component. The impact is limited to confidentiality as there is no indication of integrity or availability impact. The attack requires network access and has a high attack complexity with no privileges or user interaction needed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix link is provided, users should monitor official Google Chrome security advisories for updates and apply the update to version 152.0.7977.65 or later once available.