CVE-2026-95332 – Use of uninitialized variable in Tint in Google Chrome on on Android prior to 154.0.8037.5

Use of uninitialized variable in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)