CVE-2026-79221: Uninitialized resource in Google Chrome

The vulnerability CVE-2026-79221 affects Google Chrome versions before 152.0.7977.65. It is caused by an uninitialized resource in the Dawn graphics component, which could be exploited by a remote attacker through a crafted HTML page to read memory within the browser's sandbox environment. The issue was assigned a medium severity rating by Chromium security with a CVSS 3.1 base score of 6.5, reflecting a network attack vector with low complexity and no privileges required, but requiring user interaction. The impact is limited to confidentiality as it allows reading memory but does not affect integrity or availability.

An attacker who successfully exploits this vulnerability could read sensitive memory contents inside the sandboxed environment of Google Chrome. This could potentially expose confidential information. There is no indication of integrity or availability impact. No known exploits are reported in the wild at this time.

A fix for this vulnerability is available in Google Chrome version 152.0.7977.65 and later. Users and administrators should update to this version or later to remediate the issue. Refer to the official Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html for details.