This vulnerability arises from the use of an uninitialized resource in the GPU component of Google Chrome versions before 151.0.7922.169. An attacker with control over the renderer process can exploit this flaw by delivering a specially crafted HTML page, enabling them to read memory outside the browser's sandbox environment. The issue was assigned CVE-2026-76042 and is classified with high severity by Chromium security. No CVSS score is provided. The vendor has published an advisory linked to a stable channel update for desktop Chrome.

The vulnerability allows a remote attacker who has compromised the renderer process to read memory outside the sandbox, potentially exposing sensitive information. This could lead to information disclosure but does not indicate direct code execution or privilege escalation beyond the renderer compromise.

Google has released a stable channel update for desktop Chrome that addresses this vulnerability in version 151.0.7922.169. Users and administrators should update to this version or later to remediate the issue. Patch status is confirmed by the vendor advisory. No additional mitigation steps are indicated.