Off-by-one error in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially read… (CVE-2026-79148)
Description
An off-by-one error in the DevTools component of Google Chrome prior to version 152.0.7977.65 allows a remote attacker, through social engineering and a crafted Chrome extension, to potentially read memory inside the sandbox. The vulnerability is rated critical with a CVSS score of 9.1, indicating high impact on confidentiality and integrity without requiring user interaction or privileges. No patch information is provided in the input data.
CVSS v3.1
Score 9.1critical
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-79148 is an off-by-one error vulnerability in Google Chrome's DevTools prior to version 152.0.7977.65. This flaw allows a remote attacker to leverage social engineering and a malicious Chrome extension to read memory inside the sandbox environment. The vulnerability affects confidentiality and integrity with a critical severity rating (CVSS 9.1). No known exploits are reported in the wild, and no patch or remediation details are provided in the available data.
Potential Impact
The vulnerability allows unauthorized reading of memory inside the sandbox, potentially exposing sensitive information. It impacts confidentiality and integrity but does not affect availability. The attack requires no privileges or user interaction beyond social engineering to install a crafted extension.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when installing Chrome extensions and avoid untrusted sources.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-r8p4-w8m3-48gf
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-79148"]
- Database Specific Severity
- CRITICAL
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6a905429acd9273b49698907
Added to database: 08/27/2026, 15:13:45 UTC
Last enriched: 09/08/2026, 14:07:08 UTC
Last updated: 10/11/2026, 06:48:18 UTC
Views: 62
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.