Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML… (CVE-2026-79262)

CVE-2026-79262 is an authorization flaw in the network component of Google Chrome versions before 152.0.7977.65. This vulnerability enables a remote attacker to bypass the web origin policy by leveraging a specially crafted HTML page. The issue is classified under CWE-863 (Incorrect Authorization). The CVSS v3.1 base score is 4.3, indicating moderate impact primarily on confidentiality with no impact on integrity or availability. No known exploits in the wild have been reported, and no explicit patch links or vendor advisories are provided in the data.

The vulnerability allows an attacker to bypass the web origin policy, potentially exposing some confidential information accessible via the browser's network component. There is no impact on data integrity or availability. The attack requires user interaction (UI:R) and can be executed remotely without privileges (AV:N, PR:N).

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users and administrators should monitor official Google Chrome security advisories for updates and apply the update to version 152.0.7977.65 or later once available.