Out of bounds read in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to read… (CVE-2026-79004)

CVE-2026-79004 is an out-of-bounds read vulnerability in the Media component of Google Chrome before version 152.0.7977.65. Exploitation requires prior compromise of the renderer process and involves a crafted HTML page that enables reading memory outside the sandbox. The vulnerability is classified under CWE-125 (Out-of-bounds Read) and has a CVSS v3.1 base score of 3.4, indicating low impact. There are no known exploits in the wild and no explicit patch information provided in the source data.

A remote attacker with control over the renderer process can read memory outside the sandbox, potentially exposing sensitive information. However, the impact is limited to confidentiality (partial information disclosure) with no integrity or availability effects. The vulnerability requires user interaction and has a high attack complexity, reducing the likelihood of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch links or official fixes are provided in the available data, users should monitor for updates from Google Chrome regarding this vulnerability. Until a fix is available, limiting exposure by restricting untrusted content and maintaining updated browser versions is advisable.