Uninitialized Use Vulnerability in Google Chrome Affecting User Data
CVE-2026-15766

6.5MEDIUM

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
14 July 2026

What is CVE-2026-15766?

A vulnerability in Google Chrome prior to version 150.0.7871.125's Skia component allows remote attackers to exploit uninitialized memory usage. By crafting a malicious HTML page, an attacker can potentially retrieve sensitive information from the memory of a user's process. This issue underlines the importance of keeping browser software up to date to mitigate risks associated with uninitialized memory access.

Affected Version(s)

Chrome 150.0.7871.125

References

https://chromereleases.googleblog.com/2026/07/stable-chan...
https://issues.chromium.org/issues/514010477

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.