Out of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to read memory… (CVE-2026-79112)

CVE-2026-79112 is an out-of-bounds read vulnerability in the Skia graphics library used by Google Chrome before version 152.0.7977.65. Exploitation requires prior compromise of the renderer process and enables an attacker to read memory within the sandbox environment via a specially crafted HTML page. The vulnerability is classified under CWE-125 (Out-of-bounds Read) and has a CVSS 3.1 base score of 6.5, indicating moderate impact primarily on confidentiality.

Successful exploitation allows an attacker with control over the renderer process to read sensitive memory contents inside the sandbox, potentially exposing confidential information. There is no indication of integrity or availability impact. The vulnerability is rated as medium severity by the Chromium security team.

No official patch or remediation details are provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users should monitor for updates from Google Chrome and apply the official update to version 152.0.7977.65 or later once available.