Information leak in SignIn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network… (CVE-2026-79122)

CVE-2026-79122 is an information disclosure vulnerability in the SignIn feature of Google Chrome before version 152.0.7977.65. A remote attacker can exploit this flaw by crafting specific network traffic to leak sensitive information. The vulnerability is classified under CWE-200 (Exposure of Sensitive Information) and has a CVSS 3.1 base score of 5.9, indicating moderate impact primarily on confidentiality. There is no indication of integrity or availability impact. No known exploits are reported in the wild, and no patch or remediation details are provided in the available data.

The vulnerability allows remote attackers to obtain sensitive information from affected versions of Google Chrome without requiring user interaction. The confidentiality of data is impacted, but there is no effect on integrity or availability. The medium severity rating reflects the moderate risk posed by this information leak.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users and administrators should monitor official Google Chrome security advisories for updates addressing this vulnerability.