CVE-2026-106339: Use of released resource in Google Chrome

This vulnerability involves the use of a released resource in the Core of Google Chrome before version 155.0.8059.39. An attacker with control over the renderer process could exploit this flaw to potentially obtain data from other origins, violating same-origin policy protections. The flaw is classified as low severity by Chromium security. Google has published a stable channel update to fix this issue.

An attacker who has already compromised the renderer process could leverage this vulnerability to access cross-origin data, potentially leading to information disclosure. The impact is limited by the prerequisite that the attacker must have renderer process control. The severity is considered low.

Google has released an official stable channel update that fixes this vulnerability in Chrome version 155.0.8059.39. Users and administrators should update to this version or later to remediate the issue. No additional mitigation steps are indicated by the vendor advisory.