CVE-2026-79287

Analyzed Analyzed - Analysis Complete

Observable Discrepancy in Forms in Google Chrome

Publication date: 2026-08-25

Last updated on: 2026-08-27

Assigner: Chrome

Description

Observable discrepancy in Forms in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-25

Last Modified

2026-08-27

Generated

2026-09-15

AI Q&A

2026-08-26

EPSS Evaluated

2026-09-13

NVD

CVE-2026-79287

Affected Vendors & Products

Vendor	Product	Version / Range
google	chrome	to 152.0.7977.65 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-203	The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.

Attack-Flow Graph

Executive Summary

This vulnerability involves an observable discrepancy in forms within Google Chrome versions before 152.0.7977.65. A remote attacker could exploit this by crafting a malicious HTML page to gain access to sensitive information.

Detection Guidance

This vulnerability involves observable discrepancies in Google Chrome's Forms component. Detection primarily requires monitoring for unusual behavior in Chrome's rendering or form handling. Check Chrome version with chrome://version/ and compare against 152.0.7977.65. Inspect network traffic for suspicious HTML pages or unexpected data exfiltration attempts.

Impact Analysis

If you use an affected version of Google Chrome, a malicious website could potentially steal sensitive data you enter into forms, such as login credentials or personal information.

Compliance Impact

This vulnerability involves an observable discrepancy in Google Chrome's Forms feature, potentially allowing a remote attacker to obtain sensitive information. Such information exposure could lead to violations of data protection regulations like GDPR or HIPAA, depending on the nature of the data involved.

Mitigation Strategies

Update Google Chrome to version 152.0.7977.65 or later to address the vulnerability.

Hi! I’m here to help you understand CVE-2026-79287. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70