CVE-2026-79070 Google CVE debrief

Who should care

Users of Google Chrome prior to version 152.0.7977.65 should apply the official patch to prevent potential web origin policy bypass. This includes operators, platform administrators, vulnerability management teams, and security teams who need to review and mitigate this vulnerability. Compensating controls should be reviewed for exposed systems while remediation is scheduled and verified. Monitoring, detection, and logs should be checked for exposed assets that need extra review. Affected product or component should be reviewed for exposure, and owners should be assigned for follow-up. The official advisory or CVE record should be reviewed to validate affected scope, severity, and vendor guidance. Asset inventory and rollback/change windows should be considered for exposed systems. Source tracking should be implemented to monitor for potential attacks. The CVE record was published on 2026-08-25T21:18:02.697Z and has not been modified since then. The vulnerability has a CVSS score of 4.3 and a severity of MEDIUM, requiring immediate attention to prevent potential web origin policy bypass. The vulnerability allows a remote attacker to bypass web origin policy via a crafted HTML page. The vulnerability is caused by incorrect reference resolution in Cache in Google Chrome prior to 152.0.7977.65. The official patch should be applied to update Google Chrome to version 152.0.7977.65 or later. Restrict access to sensitive data and systems to minimize potential impact. Google Chrome should be monitored for any suspicious activity or anomalies. Compensating controls should be reviewed for exposed systems while remediation is scheduled and verified. Asset inventory and rollback/change windows should be considered for exposed systems. Source tracking should be implemented to monitor for potential attacks. The CVE record was published on 2026-08-25T21:18:02.697Z and has not been modified since then. The vulnerability has a CVSS score of 4.3 and a severity of MEDIUM, requiring immediate attention to prevent potential web origin policy bypass. The vulnerability allows a remote attacker to bypass web origin policy via a crafted HTML page. The vulnerability is caused by The CVE

Technical summary

The CVE-2026-79070 vulnerability is caused by incorrect reference resolution in Cache in Google Chrome prior to 152.0.7977.65. This allows a remote attacker to bypass web origin policy via a crafted HTML page. The vulnerability has a CVSS score of 4.3 and a severity of MEDIUM.

Defensive priority

Medium severity vulnerability in Google Chrome, requiring immediate attention to prevent potential web origin policy bypass.

Recommended defensive actions

• Apply the official patch to update Google Chrome to version 152.0.7977.65 or later.
• Restrict access to sensitive data and systems to minimize potential impact.
• Monitor Google Chrome for any suspicious activity or anomalies.

Evidence notes

The CVE-2026-79070 vulnerability is caused by incorrect reference resolution in Cache in Google Chrome prior to 152.0.7977.65. This allows a remote attacker to bypass web origin policy via a crafted HTML page. The vulnerability has a CVSS score of 4.3 and a severity of MEDIUM.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.