Cross-Origin Data Exposure in Google Chrome by Google

CVE-2026-106339

What is CVE-2026-106339?

A vulnerability in Google Chrome prior to version 155.0.8059.39 could allow remote attackers to obtain sensitive cross-origin data. This issue stems from the use of released resources in the Core, potentially enabling an attacker to exploit a compromised renderer process through a specially crafted HTML page. Users are advised to upgrade to the latest version to mitigate the risk.

References