CVE-2026-79221: Uninitialized resource in Google Chrome

This vulnerability, tracked as CVE-2026-79221, is caused by an uninitialized resource in the Dawn graphics component of Google Chrome versions before 152.0.7977.65. An attacker can exploit this flaw remotely by crafting a malicious HTML page that triggers reading of memory within the sandbox environment. The issue is classified under CWE-908 (Use of Uninitialized Resource). The CVSS 3.1 base score is 6.5, reflecting a network attack vector with low attack complexity, no privileges required, user interaction needed, and high confidentiality impact without affecting integrity or availability.

Successful exploitation allows a remote attacker to read memory inside the sandboxed environment of the browser, potentially exposing sensitive information. There is no impact on data integrity or system availability. No known exploits are reported in the wild at this time.

A fix is available in Google Chrome version 152.0.7977.65. Users and administrators should update to this version or later to remediate the vulnerability. No additional mitigation steps are indicated by the vendor advisory.