Executive brief
Google Chrome is a widely-used web browser that allows users to access web content. An information leak vulnerability in the browser's Animation component could allow an attacker to extract sensitive information by crafting a malicious HTML page, potentially exposing user data or other confidential details without additional user interaction beyond viewing the page.
Technical details
This vulnerability is an information leak in the Animation component of Google Chrome. The flaw allows a remote attacker to obtain sensitive information through a crafted HTML page, requiring only that the victim load the malicious page in their browser (network-accessible, no authentication required). The vulnerability was fixed in Chrome version 152.0.7977.65 and later. No evidence of active exploitation in the wild has been reported at the time of disclosure.
Affected products
- Google Chrome prior to 152.0.7977.65
Timeline
- 2026-08-25: disclosed
- 2026-08-25: patched: Fixed in Chrome 152.0.7977.65