CVE-2026-106376: Uninitialized resource in Google Chrome

This vulnerability involves an uninitialized resource in the ANGLE component of Google Chrome on Windows platforms. It allows a remote attacker to read memory outside the browser's sandbox by delivering a specially crafted HTML page. The flaw affects Chrome versions before 155.0.8059.39 and was assigned a high severity rating by Chromium security. The vendor has issued an official fix in version 155.0.8059.39.

Successful exploitation could allow a remote attacker to read sensitive memory contents outside the sandbox, potentially exposing confidential information. The vulnerability does not indicate code execution or privilege escalation but compromises memory confidentiality within the browser process.

Users should update Google Chrome to version 155.0.8059.39 or later, where this vulnerability has been patched. The vendor advisory confirms an official fix is available. No additional mitigation steps are indicated.