CVE-2026-76042
LowCVSS 3.1Exploitation Probability (EPSS)
Low risk31th percentile - higher than 31% of all known CVEs
Summary
Use of uninitialized resource in GPU in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Risk Assessment
An attacker could exploit this vulnerability to read data from memory outside the sandbox, potentially leading to sensitive information leakage or further attacks.
Recommendation
Update Google Chrome to version 151.0.7922.169 or later. Users should also avoid visiting suspicious pages.
Original NVD description (English source)
Use of uninitialized resource in GPU in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)