CVE-2026-78914: Uninitialized resource in Google Chrome

This vulnerability arises from an uninitialized resource in the Skia graphics library used by Google Chrome versions before 152.0.7977.65. An attacker can exploit this flaw by crafting a malicious HTML page that, when rendered, may allow reading of memory within the browser's sandbox environment. The issue is classified with a medium severity level and has a CVSS 3.1 base score of 6.5, indicating a network attack vector with low complexity and no privileges required but requires user interaction. The confidentiality impact is high, while integrity and availability are not affected.

Successful exploitation could lead to unauthorized disclosure of information from the browser's sandboxed memory space. This could potentially expose sensitive data to a remote attacker. However, the vulnerability does not impact integrity or availability of the system. There are no known exploits in the wild at the time of publication.

A fixed version of Google Chrome is available at version 152.0.7977.65. Users and administrators should update to this version or later to remediate the vulnerability. Refer to the official Google Chrome stable channel update advisory for confirmation and further details: https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html