CVE-2026-106300: Race condition in Google Chrome

CVE-2026-106300 is a race condition vulnerability in the CacheStorage implementation of Google Chrome versions before 155.0.8059.39. The flaw enables a remote attacker with control over the renderer process to bypass sandbox memory protections and read memory outside the intended sandbox boundaries via a crafted HTML page. This vulnerability is classified as medium severity by the Chromium security team. Google has published a stable channel update to fix this issue.

An attacker who has compromised the renderer process can exploit this race condition to read memory outside the sandbox, potentially exposing sensitive information. The vulnerability does not allow initial compromise but escalates the attacker's ability to access restricted memory areas within the browser sandbox.

Google has released an official stable channel update that fixes this vulnerability in Chrome version 155.0.8059.39. Users and administrators should update their Chrome installations to version 155.0.8059.39 or later to remediate this issue. No additional mitigation steps are indicated by the vendor advisory.