Information leak in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive… (CVE-2026-79271)

CVE-2026-79271 is an information leak vulnerability in the Document Object Model (DOM) of Google Chrome before version 152.0.7977.65. A remote attacker can leverage social engineering techniques to craft a malicious HTML page that, when visited by a user, can expose sensitive information. The vulnerability has a CVSS 3.1 base score of 6.5, indicating moderate impact with high confidentiality impact but no integrity or availability impact. Exploitation requires user interaction, and no known exploits are reported in the wild.

Successful exploitation can lead to unauthorized disclosure of sensitive information from the browser's DOM. This can compromise user privacy or leak data that should remain confidential. There is no impact on data integrity or system availability. The attack requires the user to interact with a maliciously crafted web page.

A fixed version of Google Chrome is available starting from 152.0.7977.65. Users and administrators should update to this version or later to remediate the vulnerability. Since no vendor advisory or patch link is provided, verify the patch status with official Google Chrome security bulletins. Until updated, users should be cautious about interacting with untrusted web content to avoid social engineering attacks.