Race condition in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web… (CVE-2026-79267)

CVE-2026-79267 is a race condition vulnerability in the Workers implementation of Google Chrome before version 152.0.7977.65. An attacker who has compromised the renderer process can exploit this flaw to bypass the web origin policy, potentially allowing access to restricted web content. The vulnerability is rated with a CVSS 3.1 base score of 4.3 (medium severity), indicating low impact on confidentiality and no impact on integrity or availability. No known exploits in the wild have been reported. No patch or remediation details are provided in the available data.

The vulnerability allows bypassing the web origin policy, which may lead to limited unauthorized access to web content. The impact is limited to confidentiality with no reported effects on integrity or availability. Exploitation requires prior compromise of the renderer process, which is a significant prerequisite.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor official Google Chrome security advisories for updates addressing this issue.