CVE-2026-79130: Buffer overflow in Google Chrome

CVE-2026-79130 is a buffer overflow vulnerability in the ANGLE graphics engine used by Google Chrome. It affects Chrome versions before 152.0.7977.65 and enables remote code execution outside the sandbox when a user visits a maliciously crafted HTML page. The vulnerability is rated critical with a CVSS 3.1 base score of 9.6, reflecting its network attack vector, low attack complexity, no privileges required, user interaction required, and complete impact on confidentiality, integrity, and availability. No known exploits in the wild have been reported at the time of publication.

Successful exploitation allows remote attackers to execute arbitrary code outside the sandbox, potentially compromising the affected system's confidentiality, integrity, and availability. This could lead to full system compromise if the attacker gains control beyond the browser sandbox.

A fixed version of Google Chrome is available at 152.0.7977.65. Users and administrators should update to this version or later to remediate the vulnerability. The vendor advisory linked confirms the availability of this update. No additional mitigation steps are indicated by the vendor.