REDHAT-BUG-2546915: High severity Google Google Chrome vulnerability

Q: What does an attacker need to exploit this issue?

An attacker would need to get a user to load a crafted HTML page in an affected Chrome version. The issue can be exploited remotely and does not require local access according to the provided description.

Q: What information could be exposed?

Successful exploitation could allow cross-origin data to be obtained. The provided information does not identify specific data types or affected sites.

Q: Which Chrome versions are affected?

Google Chrome versions prior to 155.0.8059.39 are affected. Updating to 155.0.8059.39 or a later version addresses the affected-version condition described.

Published Oct 6, 2026

Updated

Uninitialized resource in Skia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)

Affected Software

1 affected component

Google Google Chrome<155.0.8059.39

Event History

Oct 6, 2026

Data Sourced

via Red Hat·07:15 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What does an attacker need to exploit this issue?

An attacker would need to get a user to load a crafted HTML page in an affected Chrome version. The issue can be exploited remotely and does not require local access according to the provided description.

What information could be exposed?

Successful exploitation could allow cross-origin data to be obtained. The provided information does not identify specific data types or affected sites.

Which Chrome versions are affected?

Google Chrome versions prior to 155.0.8059.39 are affected. Updating to 155.0.8059.39 or a later version addresses the affected-version condition described.

REDHAT-BUG-2546915: High severity Google Google Chrome vulnerability

Affected Software

Event History

Frequently Asked Questions

What does an attacker need to exploit this issue?

What information could be exposed?

Which Chrome versions are affected?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

What information could be exposed?

Which Chrome versions are affected?