Uninitialized resource in Dawn in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a… (CVE-2026-106231)

CVE-2026-106231 describes an uninitialized resource vulnerability in the Dawn component of Google Chrome on Mac platforms before version 155.0.8059.39. This flaw permits a remote attacker to read memory outside the sandbox environment by delivering a specially crafted HTML page. The vulnerability has a CVSS 3.1 base score of 4.7, indicating medium severity, with an attack vector of network, low attack complexity, no privileges required, user interaction required, scope changed, and limited confidentiality impact.

An attacker can remotely read memory outside the sandbox on affected Chrome versions on Mac, potentially exposing sensitive information. There is no indication of integrity or availability impact. The vulnerability requires user interaction and does not require privileges.

The vulnerability affects Google Chrome on Mac versions prior to 155.0.8059.39. Users and administrators should update to version 155.0.8059.39 or later to remediate this issue. Patch status is not explicitly confirmed in the provided data, but the version boundary implies a fix in 155.0.8059.39. Verify with official vendor advisories for the latest remediation guidance.