CVE-2026-102306

Summary

This flaw involves a use-after-free vulnerability in Bluetooth handling in Google Chrome prior to version 154.0.8037.92, allowing remote attackers to potentially execute arbitrary code outside the sandbox via a crafted HTML page.

Exploitability

Exploitation requires a remote attacker to craft a specific HTML page and trick the user into opening it. The attacker must have the ability to send the crafted page to the victim.

Blast radius

If exploited, this flaw could allow a remote attacker to execute arbitrary code on the victim's system, potentially leading to full system compromise.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Google Chrome 154.0.8037.92 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.