PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-79059 Google CVE debrief

The CVE-2026-79059 vulnerability is an information leak in BFCache in Google Chrome prior to 152.0.7977.65. This vulnerability allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. The Chromium security severity is rated as Medium. The affected product is Google Chrome, and the vulnerability class is information leak. The likely operational impact is that an attacker could access sensitive data. The source-confidence limits are based on the CVE record and NVD detail page. Defenders should review the context and take action to update to version 152.0.7977.65 or later.

Vendor
Google
Product
Chrome
CVSS
LOW 3.1
CISA KEV
Not listed in stored evidence
Original CVE published
2026-08-25
Original CVE updated
2026-08-31
Advisory published
2026-08-25
Advisory updated
2026-08-31

Who should care

Defenders responsible for managing Google Chrome installations, operators, and security teams should be aware of this vulnerability and take action to update to version 152.0.7977.65 or later. The vulnerability affects Google Chrome, and the impact is that an attacker could access sensitive data. Defenders should review the context and take action to update to version 152.0.7977.65 or later.

Technical summary

The CVE-2026-79059 vulnerability is an information leak in BFCache in Google Chrome prior to 152.0.7977.65. This vulnerability allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. The Chromium security severity is rated as Medium. The affected product context is Google Chrome, and the defensive impact is that defenders should prioritize updating Google Chrome to version 152.0.7977.65 or later.

Defensive priority

Defenders should prioritize updating Google Chrome to version 152.0.7977.65 or later to address the information leak vulnerability in BFCache.

Recommended defensive actions

  • Update Google Chrome to version 152.0.7977.65 or later
  • Monitor for suspicious activity
  • Implement compensating controls
  • Review relevant monitoring, detection, and logs for exposed assets that need extra review
  • Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE-2026-79059 record indicates an information leak in BFCache in Google Chrome prior to 152.0.7977.65. The vulnerability allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. The Chromium security severity is rated as Medium.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-79059 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-79059

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-79059 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-79059

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.