CVE-2026-79099: Missing authorization in Google Chrome

This vulnerability (CVE-2026-79099) affects Google Chrome versions before 152.0.7977.65. It is caused by missing authorization checks in the Network component, which can be exploited remotely through a specially crafted HTML page to bypass system access restrictions. The issue is classified under CWE-862 (Missing Authorization). The CVSS v3.1 score is 6.5 (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N), reflecting a network attack vector with low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. There are no known exploits in the wild and no vendor advisory or patch links provided in the input data.

An attacker can remotely bypass system access restrictions in affected versions of Google Chrome by tricking a user into visiting a crafted HTML page. This could lead to unauthorized modification of data or state (integrity impact). There is no impact on confidentiality or availability reported. The vulnerability requires user interaction and does not require privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch links are provided, users and administrators should monitor Google's security advisories for updates and apply the update to version 152.0.7977.65 or later once available. Until patched, exercise caution with untrusted web content and avoid visiting suspicious sites.