Information leak in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML… (CVE-2026-79293)

CVE-2026-79293 is an information disclosure vulnerability in the Animation feature of Google Chrome before version 152.0.7977.65. A remote attacker can exploit this by delivering a specially crafted HTML page to leak sensitive information. The vulnerability is classified under CWE-200 (Exposure of Sensitive Information). The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, high confidentiality impact, and no impact on integrity or availability.

Successful exploitation allows a remote attacker to obtain sensitive information from the affected browser without requiring privileges but does require user interaction. The confidentiality impact is high, but integrity and availability are not affected. There are no reports of active exploitation in the wild.

A fix is available in Google Chrome version 152.0.7977.65 and later. Users and administrators should update affected Chrome installations to this version or newer to remediate the vulnerability. Since this is not a cloud service, remediation depends on applying the browser update. Patch status is not explicitly confirmed beyond the version mentioned; verify with official vendor advisories for the latest remediation guidance.