CVE-2026-79223
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
Integer overflow in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory inside the sandbox via a crafted file. (Severity: Low)
Risk Assessment
An attacker could access memory data in the browser, potentially leading to leakage of sensitive information.
Recommendation
Update Google Chrome to version 152.0.7977.65 or later to mitigate the vulnerability.
Other vulnerabilities in Chromium
See all- CVE-2026-14136Medium
Insufficient validation of untrusted input in Chrome for iOS prior to version 150.0.7871.47 allows a remote attacker to perform UI spoofing via a crafted HTML page.
- CVE-2026-13799High
A use-after-free vulnerability in QUIC in Google Chrome prior to 150.0.7871.47 allows a remote attacker to potentially exploit heap corruption via malicious network traffic.
Original NVD description (English source)
Integer overflow in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory inside the sandbox via a crafted file. (Chromium security severity: Low)