CVE-2026-79008: Improper input validation in Google Chrome

This vulnerability arises from improper input validation in the GPU component of Google Chrome on Android versions before 152.0.7977.65. An attacker who has already compromised the renderer process could leverage this flaw to execute arbitrary code outside the sandbox, potentially escalating privileges or causing other severe impacts. The issue is specific to the GPU processing within Chrome and requires user interaction (UI:R) and network attack vector (AV:N).

Successful exploitation could lead to arbitrary code execution outside the sandbox, compromising the security boundaries of the browser process. This could result in full control over the affected system's Chrome process and potentially the underlying device. The vulnerability affects confidentiality, integrity, and availability, as reflected in the CVSS vector (C:H/I:H/A:H).

A fixed version is available in Google Chrome 152.0.7977.65. Users and administrators should update to this version or later to remediate the vulnerability. The vendor advisory linked provides official confirmation of the update. No additional mitigations are specified beyond applying the update.