CVE-2026-106379: Uninitialized resource in Google Chrome

This vulnerability arises from an uninitialized resource in the Skia graphics library used by Google Chrome. Versions prior to 155.0.8059.39 are affected. Exploitation could enable a remote attacker to bypass same-origin policies and obtain data from other origins by delivering a specially crafted HTML page. The issue has been publicly disclosed and assigned a high severity rating by Chromium security.

Successful exploitation allows a remote attacker to access cross-origin data, potentially leading to unauthorized disclosure of sensitive information from other web origins within the browser context. This compromises the browser's security model and user data confidentiality.

Google has released an official fix in Chrome version 155.0.8059.39. Users and administrators should update affected Chrome installations to this version or later to remediate the vulnerability. No additional mitigation steps are indicated by the vendor advisory.