CVE-2026-79188: Out of bounds write in Google Chrome

An out-of-bounds write vulnerability exists in the ANGLE graphics abstraction layer used by Google Chrome versions before 152.0.7977.65. This vulnerability could allow a remote attacker to execute arbitrary code outside the sandbox environment by delivering a specially crafted HTML page to the victim. The flaw is rated critical with a CVSS 3.1 score of 9.6, indicating network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and high impact on confidentiality, integrity, and availability. The vendor advisory indicates a stable channel update has been released to address this issue.

Successful exploitation could lead to arbitrary code execution outside the sandbox, compromising the security boundaries of the browser. This could allow attackers to gain control over the affected system with the privileges of the user running Chrome, potentially leading to data theft, system compromise, or further attacks. The vulnerability affects confidentiality, integrity, and availability of the system.

Google has released a stable channel update for Chrome that addresses this vulnerability. Users and administrators should update Google Chrome to version 152.0.7977.65 or later to mitigate this issue. Patch status is confirmed by the vendor advisory. No additional mitigation steps are indicated by the vendor.