Integer overflow in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory inside the sandbox via a crafted file. (CVE-2026-79223)

CVE-2026-79223 describes an integer overflow in Chromium used by Google Chrome before version 152.0.7977.65. Exploitation of this vulnerability enables a remote attacker to read memory within the sandbox environment by supplying a crafted file. The vulnerability is classified under CWE-190 (Integer Overflow or Wraparound) and has a CVSS v3.1 score of 8.8, indicating high impact on confidentiality, integrity, and availability. There is no indication of known exploits in the wild or vendor-provided patches at this time.

Successful exploitation can lead to unauthorized reading of memory inside the sandbox, potentially exposing sensitive information. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when opening files from untrusted sources and monitor official Chromium or Google Chrome security advisories for updates.