CVE-2026-79215: Integer overflow in Google Chrome

CVE-2026-79215 is an integer overflow vulnerability in the WebGL implementation of Google Chrome before version 152.0.7977.65. This vulnerability allows remote attackers to potentially execute arbitrary code outside the sandbox environment by delivering a specially crafted HTML page. The issue is rated high severity with a CVSS 3.1 score of 8.8, reflecting network attack vector, low attack complexity, no privileges required, user interaction needed, and high impact on confidentiality, integrity, and availability. The vulnerability was publicly disclosed on August 25, 2026, and Google has released a stable channel update to address it.

Successful exploitation of this vulnerability could lead to arbitrary code execution outside the sandbox, compromising the security boundaries of the browser. This could result in full system compromise or unauthorized access to sensitive information. The high CVSS score indicates a significant risk if exploited.

Google has released a stable channel update for Chrome version 152.0.7977.65 that addresses this vulnerability. Users and administrators should update to this version or later to mitigate the risk. Patch status is confirmed by the vendor advisory. No additional mitigation steps are indicated by the vendor.