Incorrect authorization in Forms in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted… (CVE-2026-79133)

CVE-2026-79133 describes an incorrect authorization vulnerability in Google Chrome's Forms feature affecting versions before 152.0.7977.65. This flaw allows a remote attacker to access sensitive information by leveraging a specially crafted HTML page. The vulnerability is classified under CWE-863 (Incorrect Authorization). The CVSS 3.1 base score is 6.5, indicating a moderate impact primarily on confidentiality. There is no indication of integrity or availability impact, and user interaction is required for exploitation.

An attacker who successfully exploits this vulnerability can obtain sensitive information from the affected Chrome browser without requiring privileges or prior authentication. The confidentiality of user data is impacted, but integrity and availability remain unaffected. The vulnerability requires user interaction to trigger the exploit.

A fix is available in Google Chrome version 152.0.7977.65 and later. Users and administrators should update to this version or a later release to remediate the vulnerability. No additional mitigation steps are indicated by the vendor advisory.