Observable discrepancy in HTML in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML… (CVE-2026-79242)

CVE-2026-79242 describes a vulnerability in Google Chrome before version 152.0.7977.65 where an attacker can exploit an observable discrepancy in HTML rendering to gain access to sensitive information. The flaw is categorized under CWE-203, indicating an information disclosure issue due to observable discrepancies. The CVSS 3.1 base score is 5.3, reflecting a medium severity with network attack vector, high attack complexity, no privileges required, user interaction required, and impact limited to confidentiality.

A remote attacker can obtain sensitive information from a victim by convincing them to visit a specially crafted HTML page. The vulnerability does not affect integrity or availability but compromises confidentiality. No known exploits are reported in the wild.

A fix is available in Google Chrome version 152.0.7977.65 and later. Users and administrators should update affected Chrome installations to this version or newer to remediate the vulnerability. Since this is a client-side vulnerability, patching the browser is the primary mitigation.