CVE-2026-79143 Google CVE debrief

Who should care

Users of Google Chrome prior to version 152.0.7977.65, IT administrators responsible for Chrome updates, security teams monitoring for social engineering attacks, and operators of systems relying on Chrome for critical browsing or services. These stakeholders should assess their exposure, review vendor guidance, and apply updates or mitigations as needed to prevent potential bypass of system access restrictions. Additionally, defenders should verify system configurations, review access controls, and monitor for suspicious activity requiring social engineering tactics. Chrome users with high-risk browsing activities or those handling sensitive data should prioritize updates and review compensating controls.

Technical summary

CVE-2026-79143 is a Medium severity vulnerability in Google Chrome prior to 152.0.7977.65, allowing a remote attacker to bypass system access restrictions via a crafted HTML page, leveraging social engineering. The vulnerability affects Google Chrome users prior to version 152.0.7977.65. It requires social engineering for exploitation, and defenders should focus on verifying system access restrictions and monitoring for suspicious activity.

Defensive priority

Medium severity vulnerability in Google Chrome, requiring social engineering for exploitation.

Recommended defensive actions

• Apply Google Chrome update to version 152.0.7977.65 or later
• Monitor for suspicious activity requiring social engineering
• Verify system access restrictions are in place

Evidence notes

Official CVE Program record and NVD vulnerability detail page confirm the vulnerability in Google Chrome prior to 152.0.7977.65. Limited information available on exploitation. Evidence is based on official sources and may not cover all affected systems or scenarios. Defenders should verify system configurations, review access controls, and monitor for suspicious activity.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.