Operation on a resource after expiration or release in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised… (CVE-2026-79010)

CVE-2026-79010 is a use-after-expiration or use-after-release vulnerability in the network component of Google Chrome versions before 152.0.7977.65. It enables a remote attacker, who has already compromised the renderer process, to bypass the web origin policy by leveraging a specially crafted HTML page. This flaw is categorized under CWE-672 (Operation on a Resource after Expiration or Release). The vulnerability has a CVSS v3.1 base score of 4.3, indicating moderate impact primarily on confidentiality with no impact on integrity or availability.

An attacker with control over the renderer process can bypass the web origin policy, potentially allowing unauthorized access to web resources that should be restricted by origin. The confidentiality impact is limited (low), and there is no impact on integrity or availability. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users should update Google Chrome to version 152.0.7977.65 or later once the patch is available to address this vulnerability.