Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory outside the sandbox via a crafted… (CVE-2026-79270)

CVE-2026-79270 is an uninitialized resource vulnerability in the ANGLE component of Google Chrome versions before 152.0.7977.65. This flaw allows a remote attacker to read memory outside the browser sandbox by delivering a specially crafted HTML page. The vulnerability is classified under CWE-908 (Use of Uninitialized Resource) and has a CVSS 3.1 base score of 6.5, indicating a moderate impact. The attack vector is network-based with low attack complexity and no privileges required, but user interaction is necessary. The confidentiality impact is high, while integrity and availability are not affected.

An attacker can remotely read memory outside the sandbox environment of the browser, potentially exposing sensitive information. The vulnerability does not affect integrity or availability, but the confidentiality impact is high. There are no known exploits in the wild at this time.

A fix is available in Google Chrome version 152.0.7977.65. Users and administrators should update to this version or later to remediate the vulnerability. Since this is a client-side software vulnerability, patching the affected browser is the recommended mitigation.