CVE-2026-103623

Summary

The flaw is a use-after-free vulnerability in the MediaStream component of Google Chrome prior to version 154.0.8037.97, which allows remote attackers to execute arbitrary code within the sandbox via a crafted HTML page. This vulnerability is significant because it can lead to the execution of malicious code, compromising the security of the affected system.

Exploitability

Exploiting this vulnerability requires a remote attacker to craft a specific HTML page and trick a user into opening it. The attacker must have the ability to control the content of the HTML page and the user must interact with it.

Blast radius

If exploited, this vulnerability could allow a remote attacker to execute arbitrary code within the sandbox, potentially leading to full system compromise and unauthorized access to sensitive data.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Google Chrome version 154.0.8037.97 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.