CVE-2026-79269: Uninitialized resource in Google Chrome

This vulnerability concerns an uninitialized resource in the ANGLE graphics engine used by Google Chrome versions before 152.0.7977.65. Exploitation could allow a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how documents or scripts loaded from one origin can interact with resources from another origin. The CVSS 3.1 vector indicates the attack requires network access, low complexity, no privileges, and user interaction, with limited confidentiality impact and no integrity or availability impact.

The impact is limited to a potential bypass of the web origin policy, which could allow unauthorized access to data or resources that should be segregated by origin. There is no reported impact on integrity or availability. The vulnerability is rated medium severity with a CVSS score of 4.3. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html for current remediation guidance. Until official confirmation of a fix, users should apply updates promptly once available. No other specific mitigations are provided by the vendor advisory.