Information leak in Sharing in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker leveraging social engineering to obtain… (CVE-2026-79055)

CVE-2026-79055 is an information leak vulnerability in the Sharing component of Google Chrome on Android devices before version 152.0.7977.65. A local attacker, leveraging social engineering tactics, can exploit this flaw through a co-installed application to access sensitive information. The vulnerability is classified under CWE-200 (Exposure of Sensitive Information). The CVSS 3.1 vector indicates the attack requires local access with high attack complexity, no privileges, and no user interaction, impacting confidentiality but not integrity or availability.

The vulnerability allows unauthorized disclosure of sensitive information to a local attacker who can convince the user to interact with a malicious co-installed app. This could lead to privacy breaches or leakage of confidential data. There is no indication of integrity or availability impact. No known exploits are reported in the wild.

No explicit patch or remediation details are provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users and administrators should monitor official Google Chrome security advisories for updates and apply the update to version 152.0.7977.65 or later once available.