Intelligence online17 sources monitored13 actively exploited 7d45 published 24hChecked recently
Vulnerability record

CVE-2026-106184

ElevatedNo known exploitation

Patch status

Official fix available since

Apply the vendor's update to every affected system. Check the fixed-in versions below where known.

Basis: Google Chrome Releases vendor advisory

Description

Uninitialized resource in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)

Source: NIST National Vulnerability Database. Official vulnerability data, reproduced as published.

Affected products

ProductVendorAffected versionsFixed inSource
ChromeGoogle< 155.0.8059.39155.0.8059.39NVD

Sources: NVD = NIST National Vulnerability Database.

Intelligence timeline

Developments from the last 30 days, newest first.

  1. CVSS scoredUpdate

    CVE-2026-106184 scored CVSS 4.3

    Basis: NIST National Vulnerability Database

Coverage

CriticalPatch

Extended Stable Update for Desktop

Patch

Apply the vendor's security update for Windows and Chrome.

Google Chrome ReleasesHomeSMBEnterprise+1

References