CVE-2026-106215: Uninitialized resource in Google Chrome

This vulnerability arises from an uninitialized resource in the ANGLE graphics abstraction layer within Google Chrome on Windows platforms. Exploitation permits a remote attacker to read memory outside the sandbox environment, potentially exposing sensitive information. The flaw was fixed in Chrome version 155.0.8059.39. The vendor advisory confirms the update and categorizes the severity as high.

Successful exploitation enables a remote attacker to bypass sandbox memory protections and read memory contents outside the intended sandbox boundary. This could lead to information disclosure but does not indicate code execution or privilege escalation from the provided data.

Users should update Google Chrome on Windows to version 155.0.8059.39 or later, where this vulnerability is patched. The vendor advisory at https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html provides official update details. No additional mitigation steps are specified.