CVE-2026-79229: Uninitialized resource in Google Chrome

This vulnerability in Google Chrome's ANGLE component arises from an uninitialized resource that can be exploited by a remote attacker with control over the renderer process to read memory outside the sandbox. The issue affects Chrome versions prior to 152.0.7977.65. The vulnerability is classified with a CVSS 3.1 base score of 6.5 (medium severity), indicating a network attack vector with low attack complexity, no privileges required, user interaction needed, and high confidentiality impact but no integrity or availability impact. The vendor advisory confirms the fix was included in Chrome version 152.0.7977.65.

An attacker who has already compromised the renderer process can exploit this vulnerability to read memory outside the sandbox, potentially exposing sensitive information. There is no indication of privilege escalation, integrity modification, or denial of service. The confidentiality impact is high, but the overall severity is medium.

A fix is available in Google Chrome version 152.0.7977.65. Users and administrators should update to this version or later to remediate the vulnerability. No additional mitigation actions are indicated by the vendor advisory.