Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a… (CVE-2026-79269)

CVE-2026-79269 describes a vulnerability in the ANGLE component of Google Chrome before version 152.0.7977.65, where an uninitialized resource may be leveraged by a remote attacker to bypass the web origin policy through a specially crafted HTML page. The vulnerability is classified under CWE-908 (Use of Uninitialized Resource). The CVSS 3.1 base score is 4.3, indicating moderate risk with network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and low confidentiality impact.

A successful exploitation could allow an attacker to bypass the web origin policy, potentially enabling unauthorized access to web resources that should be isolated by origin. The confidentiality impact is low, and there is no impact on integrity or availability. No known active exploitation has been reported.

A fix is available in Google Chrome version 152.0.7977.65 and later. Users and administrators should update to this version or newer to remediate the vulnerability. No additional mitigation steps are indicated by the vendor advisory.