CVE-2026-79072 Google CVE debrief

Who should care

Google Chrome users, particularly those with high-risk browsing scenarios, should apply the update to prevent potential memory reads within the sandbox. This includes users with sensitive data, high-risk browsing habits, or those subject to advanced threats. IT and security teams responsible for Chrome deployments should prioritize this update and review their current version's vulnerability status. Chrome users in critical infrastructure or high-value target sectors should take extra precautions to ensure timely updates and compensating controls. Additionally, security teams should monitor Chrome release notes for future security updates and consider implementing compensating controls for high-risk Chrome usage scenarios if immediate updates are not feasible. Chrome users should also be aware of potential risks associated with outdated versions and take proactive steps to mitigate these risks.

Technical summary

Improper state validation in Performance in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. This vulnerability has a high severity rating and impacts Google Chrome users with high-risk browsing scenarios. The vulnerability can be mitigated by applying the Google Chrome update to version 152.0.7977.65 or later. It is recommended to inventory Chrome installations to identify potentially vulnerable versions and monitor Chrome release notes for future security updates. Additionally, consider implementing compensating controls for high-risk Chrome usage scenarios. The vulnerability is confirmed by the official CVE Program record and NVD vulnerability detail page, which provide source-provided CVE metadata and source-specific vulnerability assessment.

Defensive priority

High severity vulnerability in Google Chrome, requiring immediate attention to prevent potential memory reads within the sandbox.

Recommended defensive actions

• Apply Google Chrome update to version 152.0.7977.65 or later
• Inventory Chrome installations to identify potentially vulnerable versions
• Monitor Chrome release notes for future security updates
• Consider implementing compensating controls for high-risk Chrome usage scenarios

Evidence notes

Official CVE Program record and NVD vulnerability detail page confirm the vulnerability in Google Chrome prior to version 152.0.7977.65. Limited information available on exploitability and affected scope. Defenders should verify Chrome installations, review compensating controls, and monitor Chrome release notes for future security updates. Evidence is based on CVE and NVD data, which may have limitations.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.