Information leak in Intents in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a… (CVE-2026-79124)

CVE-2026-79124 describes an information leak vulnerability in the Intents component of Google Chrome on Android platforms before version 152.0.7977.65. A remote attacker can exploit this by delivering a crafted HTML page that triggers the leak of sensitive information. The vulnerability is classified under CWE-200 (Exposure of Sensitive Information). The CVSS 3.1 base score is 6.5, indicating a medium severity with network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high confidentiality impact.

The vulnerability allows remote attackers to leak sensitive information from affected devices running vulnerable versions of Google Chrome on Android. There is no indication of integrity or availability impact. The confidentiality impact is high, meaning sensitive data could be exposed. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users and administrators should monitor official Google Chrome security advisories for updates and apply updates promptly once available.