Observable discrepancy in Forms in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML… (CVE-2026-79287)

CVE-2026-79287 describes an information disclosure vulnerability in Google Chrome versions before 152.0.7977.65. The flaw arises from an observable discrepancy in form handling that enables a remote attacker to extract sensitive information via a crafted HTML page. The vulnerability has a CVSS 3.1 base score of 5.3, reflecting network attack vector, high attack complexity, no privileges required, user interaction required, and high confidentiality impact without affecting integrity or availability.

Successful exploitation allows a remote attacker to obtain sensitive information from the victim's browser through a crafted HTML page. There is no impact on data integrity or availability. The vulnerability requires user interaction and has a high attack complexity, limiting the ease of exploitation.

A fix is available in Google Chrome version 152.0.7977.65. Users and administrators should update to this version or later to remediate the vulnerability. No additional mitigation guidance is provided or required beyond applying the official update.