Observable discrepancy in Glic in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML… (CVE-2026-79181)

CVE-2026-79181 describes an information disclosure vulnerability in Google Chrome versions before 152.0.7977.65. The flaw arises from an observable discrepancy in Glic, which can be exploited remotely through a specially crafted HTML page to leak sensitive information. The vulnerability has a CVSS 3.1 base score of 5.3, indicating medium severity, with attack vector network, high attack complexity, no privileges required, user interaction required, and impact limited to confidentiality.

An attacker can remotely exploit this vulnerability by convincing a user to visit a malicious HTML page, resulting in unauthorized disclosure of sensitive information. The integrity and availability of the browser or system are not affected. The impact is limited to confidentiality loss.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users and administrators should monitor official Google Chrome security advisories for updates and apply the update to version 152.0.7977.65 or later once available.