CVE-2026-79004: Out of bounds read in Google Chrome

This vulnerability involves an out-of-bounds read in the Media component of Google Chrome before version 152.0.7977.65. A remote attacker with control over the renderer process can exploit this flaw via a crafted HTML page to read memory outside the sandbox, potentially exposing sensitive information. The issue is classified with a CVSS v3.1 score of 3.4 (low severity), reflecting limited impact. The vendor advisory linked does not explicitly confirm a patch or remediation status.

The impact is limited to information disclosure through out-of-bounds memory reads by an attacker who has already compromised the renderer process. There is no indication of privilege escalation, integrity, or availability impact. The vulnerability requires user interaction and has a high attack complexity, reducing the likelihood of exploitation.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html for current remediation guidance. Since this is a client-side vulnerability in Chrome, users should update to the latest stable version once available to ensure protection.