Threats tagged 'ghsa-v859-9jhp-24vh'

CVE-2026-102315 is a vulnerability in Google Chrome on Windows prior to version 154.0.8037.92. It involves an uninitialized resource in the Media component that allows a remote attacker, who has already compromised the renderer process, to read memory outside the sandbox via a crafted HTML page. The vulnerability has a low CVSS score of 3.4 and is rated low severity by Chromium. A fix is available in Chrome version 154.0.8037.92.