CVE-2026-79071: Race condition in Google Chrome

CVE-2026-79071 is a race condition vulnerability in the GPU subsystem of Google Chrome before version 152.0.7977.65. Exploitation requires prior compromise of the renderer process and can lead to arbitrary code execution outside the sandbox, increasing the impact of an initial compromise. The vulnerability has a CVSS 3.1 base score of 8.3, indicating high severity with network attack vector, high impact on confidentiality, integrity, and availability, and requiring user interaction with high attack complexity.

Successful exploitation can allow an attacker with access to the renderer process to execute arbitrary code outside the sandbox, potentially leading to full system compromise. This elevates the privileges of an attacker who has already compromised the renderer process, increasing the overall risk to the affected system.

A fix is available in Google Chrome version 152.0.7977.65. Users and administrators should update to this version or later to remediate the vulnerability. Refer to the official Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html for confirmation and update instructions.