CVE-2026-85043: Incomplete cleanup in Google Chrome

This vulnerability (CVE-2026-85043) arises from incomplete cleanup in the network subsystem of Google Chrome versions before 152.0.7977.82. Exploitation enables a remote attacker to bypass system access restrictions via specially crafted network traffic. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H) reflects that the attack is network-based, requires no privileges or user interaction, and results in high confidentiality impact and high availability impact. The vulnerability is classified under CWE-459 (Incomplete Cleanup). No known exploits in the wild have been reported. No explicit patch link is provided, but the affected versions are those prior to 152.0.7977.82.

Successful exploitation allows a remote attacker to bypass system access restrictions, potentially leading to unauthorized access to sensitive information (high confidentiality impact) and disruption of service (high availability impact). The vulnerability does not impact integrity directly. No user interaction or privileges are required, increasing the risk of remote exploitation.

A fix is available in Google Chrome version 152.0.7977.82. Users and administrators should update to this version or later to remediate the vulnerability. Since this is not a cloud service, patching the client software is necessary. No additional vendor advisory content is provided; therefore, check official Google Chrome security advisories for confirmation and further guidance.