Uninitialized resource in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to… (CVE-2026-79007)

CVE-2026-79007 is a vulnerability in Google Chrome's GPU handling where an uninitialized resource allows a remote attacker, with control over the renderer process, to potentially read memory outside the sandbox. This could be triggered by a crafted HTML page. The vulnerability is related to CWE-908 (Use of Uninitialized Resource). The CVSS v3.1 base score is 3.1, reflecting low impact with network attack vector, high attack complexity, no privileges required, user interaction required, and limited confidentiality impact.

The vulnerability allows potential unauthorized reading of memory outside the sandbox by an attacker who has already compromised the renderer process. The confidentiality impact is limited, and there is no impact on integrity or availability. The overall severity is low.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or fix information is provided in the available data. Users should monitor official Google Chrome security advisories for updates and apply patches once available.