CVE-2026-84326: Uninitialized resource in Google Chrome

This vulnerability arises from an uninitialized resource in the V8 JavaScript engine used by Google Chrome versions before 152.0.7977.75. Exploiting this flaw, a remote attacker can execute arbitrary code inside the browser's sandbox environment by crafting a malicious HTML page. The issue is tracked as CWE-908 (Use of Uninitialized Resource). The CVSS 3.1 vector indicates the attack requires no privileges and low attack complexity but does require user interaction. The vulnerability affects confidentiality, integrity, and availability at a high level.

Successful exploitation allows remote code execution within the sandboxed environment of Google Chrome, potentially compromising the browser's security boundaries. This can lead to unauthorized access to sensitive data, manipulation of browser behavior, or denial of service. The high CVSS score reflects the critical nature of the impact on confidentiality, integrity, and availability.

A fixed version of Google Chrome is available at 152.0.7977.75. Users and administrators should update to this version or later to remediate the vulnerability. No additional mitigation steps are indicated or required beyond applying the official update.