Observable discrepancy in SVG in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (CVE-2026-79016)

CVE-2026-79016 describes an observable discrepancy in SVG handling in Google Chrome versions before 152.0.7977.65. This flaw enables a remote attacker to extract cross-origin data by delivering a specially crafted HTML page that leverages this SVG discrepancy. The vulnerability is classified under CWE-203 (Observable Discrepancy) and has a CVSS v3.1 base score of 4.3, indicating a moderate impact primarily on confidentiality. There is no indication of integrity or availability impact. The vulnerability requires no privileges and user interaction is required. No official patch or remediation details are provided in the available data.

The vulnerability allows an attacker to obtain cross-origin data, which could lead to unauthorized disclosure of information. The impact is limited to confidentiality with no effect on integrity or availability. The attack vector is network-based, requiring user interaction, and the attack complexity is low.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users and administrators should monitor official Google Chrome security advisories for updates addressing this issue.