Observable discrepancy in Autofill in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted… (CVE-2026-79030)

CVE-2026-79030 describes a vulnerability in Google Chrome's Autofill functionality where an observable discrepancy can be exploited by a remote attacker via a crafted HTML page to extract sensitive information. This issue affects versions of Chrome prior to 152.0.7977.65. The vulnerability is rated medium severity with a CVSS v3.1 score of 5.3, indicating that it requires user interaction and has a high attack complexity but no privileges are required for exploitation. The flaw relates to information exposure due to inconsistent behavior in Autofill.

A remote attacker can leverage this vulnerability to obtain sensitive information from users by tricking them into visiting a maliciously crafted HTML page. The impact is limited to confidentiality as there is no integrity or availability impact. Exploitation requires user interaction and has high complexity, reducing the likelihood of widespread exploitation.

A fix is available in Google Chrome version 152.0.7977.65 and later. Users and administrators should update affected Chrome installations to version 152.0.7977.65 or newer to remediate this vulnerability. No additional mitigation steps are indicated.