CVE-2026-106399

Out of bounds read in Skia in Google Chrome prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to potentially read memory via a crafted file. Chromium security severity: Low...

CVE-2026-106386

Uninitialized resource in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106300

Race condition in CacheStorage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106290

Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106275

Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106261

Uninitialized resource in Video in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106258

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106231

Uninitialized resource in Dawn in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106215

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106202

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106399

An out-of-bounds read vulnerability exists in the Skia component of Google Chrome prior to version 155.0.8059.39 . A local attacker could use social engineering to trick a user into opening a crafted file , potentially allowing the attacker to read memory . The Chromium security severity for this...

CVE-2026-106275

Google Chrome on Android (prior to version 155.0.8059.39 ) is vulnerable to a use of uninitialized resource (CWE-908) within the GPU component. A remote attacker can exploit this by presenting a crafted HTML page to allow reading memory outside the sandbox. The Chromium security severity is rated...

CVE-2026-106386

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a memory disclosure flaw caused by an uninitialized resource in the WebAudio component. A remote attacker can exploit this by tricking a user into visiting a crafted HTML page , which allows the attacker to read memory inside the san...

CVE-2026-106395

Google Chrome on Android versions prior to 155.0.8059.39 is vulnerable to an uninitialized resource flaw in the Dawn component. A remote attacker can exploit this by hosting a crafted HTML page to read memory outside the sandbox . No specific exploitation details or remediation steps are provided...

CVE-2026-106261

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an uninitialized resource flaw in the Video component. A remote attacker can exploit this by using a crafted HTML page to read memory inside the sandbox . The vulnerability is associated with CWE-908 . No specific exploit details or ...

CVE-2026-106300

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a race condition in CacheStorage . A remote attacker who has already compromised the renderer process can use a crafted HTML page to read memory outside the sandbox . The security severity for this Chromium vulnerability is rated as ...

CVE-2026-106223

Google Chrome on Android prior to version 155.0.8059.39 is vulnerable to a memory corruption issue involving an uninitialized resource in the GPU . A remote attacker can leverage this flaw by providing a crafted HTML page to read memory outside the sandbox. The Chromium security severity for this...

CVE-2026-106202

Google Chrome on Windows versions prior to 155.0.8059.39 is vulnerable to an uninitialized resource flaw within the ANGLE component. A remote attacker can exploit this by using a crafted HTML page to read memory outside the sandbox . No specific exploit information or web applicability details ar...

CVE-2026-106258

Google Chrome on Windows versions prior to 155.0.8059.39 is vulnerable to a memory corruption issue caused by an uninitialized resource in the ANGLE component (CWE-908). A remote attacker can exploit this vulnerability by using a crafted HTML page to read memory outside the sandbox . No specific ...

CVE-2026-106376

Google Chrome on Windows versions prior to 155.0.8059.39 is vulnerable to an uninitialized resource issue within the ANGLE component. A remote attacker can leverage a crafted HTML page to read memory outside the sandbox . The Chromium security severity is rated as High . No specific exploit infor...