CVE-2026-106336
개요
An observable discrepancy flaw was found in the Paint component of the Chromium browser.
Upstream bug(s):
내용
Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.
취약점 이해 (CWE)
Confidentiality,Access Control
Technical Impact: Read Application Data; Bypass Protection Mechanism
An attacker can gain access to sensitive information about the system, including authentication information that may allow an attacker to gain access to the system. Other security-relevant information about the operation or internal state of the product may be revealed to an unauthorized actor, such as whether a particular operation was successful or not.
Confidentiality
Technical Impact: Read Application Data
In some cases, discrepancies can be used by attackers to form a side channel. When cryptographic primitives are vulnerable to side-channel attacks, this could be used to reveal unencrypted plaintext in the worst case.
