Incorrect authorization in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially leak sensitive information via a… (CVE-2026-79179)

CVE-2026-79179 describes an incorrect authorization vulnerability in the Document Object Model (DOM) of Google Chrome versions before 152.0.7977.65. This flaw could enable a remote attacker to leak sensitive information by crafting a malicious HTML page. The vulnerability is categorized under CWE-863 (Incorrect Authorization). The CVSS 3.1 base score is 6.5, reflecting a medium severity with high confidentiality impact but no integrity or availability impact. No exploit code or active exploitation is reported.

Successful exploitation could lead to unauthorized disclosure of sensitive information from the affected browser. There is no impact on integrity or availability. The vulnerability requires user interaction (UI:R) but no privileges (PR:N) and can be exploited remotely over the network (AV:N).

A fix is available in Google Chrome version 152.0.7977.65 and later. Users and administrators should update to this version or later to remediate the vulnerability. Since this is a client software vulnerability, patching the browser is the recommended mitigation. No additional vendor advisory content was provided to indicate alternative mitigations or temporary workarounds.