CVE-2026-78969: Uninitialized resource in Google Chrome

This vulnerability is caused by an uninitialized resource in the video processing component of Google Chrome versions before 152.0.7977.65. An attacker can exploit this flaw by crafting a malicious HTML page that triggers the uninitialized resource, enabling them to read memory within the sandboxed environment. The vulnerability is tracked as CWE-908 (Use of Uninitialized Resource) and has a CVSS 3.1 base score of 6.5, indicating a moderate impact primarily on confidentiality. There are no known exploits in the wild, and no official patch link was provided in the data, but the affected version is explicitly stated as prior to 152.0.7977.65.

Successful exploitation allows a remote attacker to read memory inside the sandboxed environment of Google Chrome, potentially exposing sensitive information. The vulnerability does not impact integrity or availability. The CVSS score of 6.5 reflects a medium severity with high confidentiality impact but no integrity or availability impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users should update to version 152.0.7977.65 or later once confirmed by the vendor. Until then, avoid visiting untrusted or suspicious websites that could host crafted HTML pages exploiting this vulnerability.