CVE-2026-106284: Out of bounds read in Google Chrome

This vulnerability involves an out-of-bounds read in the printing functionality of Google Chrome on Windows platforms. Exploitation requires that the attacker has compromised the renderer process and uses social engineering to lure the user to a malicious HTML page. Successful exploitation allows reading memory outside the sandbox, potentially exposing sensitive information. The issue affects Chrome versions before 155.0.8059.39. Google has released a stable channel update addressing this issue as per their advisory.

An attacker who has already compromised the renderer process and successfully uses social engineering can read memory outside the sandbox. This could lead to exposure of sensitive information from the browser's memory. The vulnerability does not allow direct remote code execution but can aid further attacks by leaking memory contents.

Google has released an official fix in Chrome version 155.0.8059.39. Users and administrators should update to this version or later to remediate the vulnerability. No additional mitigation is required if the browser is updated.