CVE-2026-79131: Out of bounds write in Google Chrome

An out-of-bounds write vulnerability exists in the ANGLE component of Google Chrome before version 152.0.7977.65. Exploitation requires a user to visit a maliciously crafted HTML page, which can trigger arbitrary code execution outside the sandbox environment. This vulnerability is rated critical with a CVSS 3.1 score of 9.6, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, and complete impact on confidentiality, integrity, and availability. The vulnerability is fixed in Chrome 152.0.7977.65 as per the official Google Chrome stable channel update advisory.

Successful exploitation allows remote attackers to execute arbitrary code outside the sandbox, potentially leading to full compromise of the affected system's confidentiality, integrity, and availability. This could enable attackers to bypass security restrictions and execute malicious payloads with the privileges of the user running Chrome.

Users and administrators should update Google Chrome to version 152.0.7977.65 or later, where this vulnerability is fixed. The vendor advisory at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html confirms the availability of this update. No other mitigation is specified or required once the update is applied.