CVE-2026-106273: Uninitialized resource in Google Chrome

This vulnerability involves an uninitialized resource in the video handling code of Google Chrome versions before 155.0.8059.39. An attacker with control over the renderer process can exploit this flaw to read memory outside the sandbox environment, potentially exposing sensitive information. The vulnerability was assigned a high severity by the Chromium security team and was fixed in the stable update 155.0.8059.39.

Successful exploitation requires prior compromise of the renderer process. The attacker can then read memory outside the sandbox, which may lead to information disclosure. There is no indication of remote code execution or broader system compromise solely from this vulnerability.

Users should update Google Chrome to version 155.0.8059.39 or later to remediate this vulnerability. The vendor has released an official fix as noted in the Chrome stable channel update announcement. No additional mitigation steps are indicated.