Improper privilege management in Actor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass… (CVE-2026-79090)

This vulnerability in Google Chrome's Actor component prior to version 152.0.7977.65 is due to improper privilege management, which enables a remote attacker to bypass system access restrictions by convincing a user to interact with a specially crafted HTML page. The issue is classified under CWE-269 (Improper Privilege Management) and has a CVSS 3.1 base score of 9.8, reflecting critical impact with network attack vector, no required privileges or user interaction, and high impact on confidentiality, integrity, and availability. No official patch or vendor advisory details are available at this time.

Successful exploitation could allow an attacker to bypass system access restrictions remotely, potentially leading to full compromise of the affected system's confidentiality, integrity, and availability. The vulnerability is critical due to the high CVSS score and the lack of required privileges or user interaction for exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution with untrusted HTML content and avoid interacting with suspicious web pages that could leverage social engineering.