Information leak in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain… (CVE-2026-79220)

CVE-2026-79220 is an information leak vulnerability in the Network component of Google Chrome before version 152.0.7977.65. A remote attacker with control over the renderer process can exploit this flaw via a crafted HTML page to access sensitive information. The vulnerability is classified under CWE-200 (Information Exposure) and has a CVSS v3.1 base score of 5.3, reflecting medium severity. There are no known exploits in the wild, and no patch links are provided in the data.

The vulnerability allows unauthorized disclosure of sensitive information to an attacker who has already compromised the renderer process. It does not impact system integrity or availability. The CVSS vector indicates that the attack requires network access, high attack complexity, no privileges, and user interaction, with confidentiality impact rated high.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix links are provided, users should monitor official Google Chrome security advisories for updates. Until a fix is available, limiting exposure by restricting untrusted content and minimizing renderer process compromise risk is advisable.