CVE-2026-79013

Analyzed Analyzed - Analysis Complete

Improper Input Validation in Google Chrome

Publication date: 2026-08-25

Last updated on: 2026-08-27

Assigner: Chrome

Description

Improper input validation in Sync in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic. (Chromium security severity: Medium)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-25

Last Modified

2026-08-27

Generated

2026-09-15

AI Q&A

2026-08-26

EPSS Evaluated

2026-09-13

NVD

CVE-2026-79013

Affected Vendors & Products

Vendor	Product	Version / Range
google	chrome	to 152.0.7977.65 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-20	The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Attack-Flow Graph

Executive Summary

This vulnerability is an improper input validation issue in Google Chrome's Sync feature. It allows a remote attacker to exploit crafted network traffic to obtain sensitive information from affected systems.

Detection Guidance

Detection may involve monitoring network traffic for unusual patterns or inspecting Chrome versions. Check Chrome version with chrome://version/ or command line. Look for unexpected data exfiltration or suspicious network activity.

Impact Analysis

If exploited, this vulnerability could allow an attacker to access sensitive data transmitted through Chrome's Sync feature, potentially exposing personal or confidential information.

Compliance Impact

This vulnerability could lead to unauthorized access to personal data, which may violate GDPR and HIPAA compliance requirements related to data protection and confidentiality.

Mitigation Strategies

Update Google Chrome to version 152.0.7977.65 or later immediately. Disable Sync feature if not needed. Monitor network traffic for suspicious activity and restrict outbound connections if anomalies are detected.

Hi! I’m here to help you understand CVE-2026-79013. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70