Information leak in BFCache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain… (CVE-2026-79059)

CVE-2026-79059 is an information leak vulnerability in the BFCache implementation of Google Chrome before version 152.0.7977.65. It enables a remote attacker with control over the renderer process to access cross-origin data through a specially crafted HTML page. The issue is classified under CWE-200 (Exposure of Sensitive Information). The CVSS 3.1 vector indicates network attack vector, high attack complexity, no privileges required, user interaction required, unchanged scope, and low confidentiality impact.

The vulnerability allows an attacker who has compromised the renderer process to leak cross-origin data, potentially exposing sensitive information from other origins. The impact is limited to confidentiality with no integrity or availability effects. The overall severity is low, reflecting the limited scope and complexity of exploitation.

No explicit patch or remediation details are provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users and administrators should monitor official Google Chrome security advisories for updates and apply the fixed version 152.0.7977.65 or later once available.