Uninitialized resource in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to… (CVE-2026-78984)

CVE-2026-78984 is a vulnerability in Google Chrome's GPU handling where an uninitialized resource can be exploited by a remote attacker with control over the renderer process. This can lead to unauthorized reading of memory outside the sandbox environment via a crafted HTML page. The issue is classified under CWE-908 (Use of Uninitialized Resource). The CVSS 3.1 base score is 3.4, reflecting low impact with network attack vector, high attack complexity, no privileges required, user interaction required, and confidentiality impact limited to partial information disclosure.

The vulnerability allows a remote attacker who has already compromised the renderer process to potentially read sensitive memory outside the sandbox. This could lead to partial information disclosure but does not affect integrity or availability. The overall impact is limited and rated low severity.

No patch or remediation information is currently provided. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, limiting exposure to untrusted content and maintaining updated browser versions is advisable.