CVE-2026-79206: Out of bounds read in Google Chrome

This vulnerability involves an out-of-bounds read in the FileSystem functionality of Google Chrome versions before 152.0.7977.65. An attacker can exploit this by leveraging social engineering to convince a user to open a malicious HTML page, which then reads memory outside the browser's sandbox. The CVSS vector indicates the attack is network-based, requires low attack complexity, no privileges, but does require user interaction. The impact is high confidentiality loss without integrity or availability impact. The vulnerability is classified as medium severity by Chromium security.

Successful exploitation can lead to unauthorized disclosure of memory contents outside the sandbox, potentially exposing sensitive information. There is no impact on integrity or availability. The attack requires user interaction via social engineering, limiting the attack vector to targeted scenarios.

The vendor advisory is available but does not explicitly confirm patch availability or remediation level in the provided data. Users should update Google Chrome to version 152.0.7977.65 or later once confirmed. Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html for current remediation guidance.