CVE-2026-106238

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39

Description A race condition exists in the Fonts component. This issue allows a remote attacker who has already compromised the renderer process to potentially execute arbitrary code outside the sandbox by using a specially crafted HTML page. A race condition is a situation where the system's substantive behavior is dependent on the sequence or timing of other uncontrollable events.

Recommendations Update Google Chrome to version 155.0.8059.39 or later.