CVE-2026-106386: Uninitialized resource in Google Chrome

CVE-2026-106386 is a vulnerability in Google Chrome's WebAudio subsystem where an uninitialized resource could be exploited by a remote attacker to read memory within the sandbox environment. This flaw affects versions of Chrome prior to 155.0.8059.39. The vulnerability was publicly disclosed and rated medium severity by Chromium security. Google has issued a stable channel update to fix this issue, as detailed in their official advisory.

Successful exploitation of this vulnerability allows a remote attacker to read memory inside the sandboxed environment of Chrome via a specially crafted HTML page. This could potentially lead to information disclosure from the browser's memory space. The severity is rated medium, indicating a moderate impact on confidentiality but no direct code execution or privilege escalation is described.

Users should update Google Chrome to version 155.0.8059.39 or later, where this vulnerability has been fixed. The vendor advisory confirms that a stable channel update is available addressing this issue. Applying this official update fully mitigates the risk.