Improper input validation in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to… (CVE-2026-79255)

CVE-2026-79255 is a vulnerability in the WebRTC component of Google Chrome before version 152.0.7977.65. It involves improper input validation that enables a remote attacker, who has compromised the renderer process, to bypass the web origin policy by delivering a crafted HTML page. This flaw is classified under CWE-20 (Improper Input Validation) and has a CVSS v3.1 base score of 3.1, indicating low severity. There is no indication of known exploits in the wild or an official patch link provided in the data.

The vulnerability allows bypassing of the web origin policy, which could enable unauthorized access to web resources within the context of the compromised renderer process. However, the impact is limited by the prerequisite that the attacker must have already compromised the renderer process. The CVSS score reflects a low impact on confidentiality and no impact on integrity or availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix link is provided, users should monitor official Google Chrome security advisories for updates. Until a fix is available, limiting exposure to untrusted content and ensuring renderer process security may help reduce risk.