CVE-2026-79216: Buffer overflow in Google Chrome

CVE-2026-79216 is a buffer overflow vulnerability in the Blink rendering engine of Google Chrome versions before 152.0.7977.65. An attacker who has compromised the renderer process can exploit this flaw by delivering a crafted HTML page to execute arbitrary code inside the sandbox environment. The vulnerability is rated with a CVSS 3.1 base score of 7.5 (high), reflecting network attack vector, high impact on confidentiality, integrity, and availability, and requiring user interaction with high attack complexity. The issue is documented in a Google Chrome stable channel update advisory.

Successful exploitation allows arbitrary code execution inside the sandboxed renderer process, potentially leading to further compromise of the browser environment. The impact includes full confidentiality, integrity, and availability loss within the sandbox context. However, exploitation requires prior compromise of the renderer process and user interaction, which limits the attack surface.

A fix is available in Google Chrome version 152.0.7977.65. Users and administrators should update to this version or later to remediate the vulnerability. The vendor advisory at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html provides official update details. No additional mitigation steps are indicated by the vendor.