CVE-2026-106186

Summary

The flaw allows a local attacker to execute arbitrary code outside the sandbox by manipulating the search path in Google Chrome on Windows, potentially leading to full system compromise.

Exploitability

Exploitation requires local access and manipulation of the search path, making it moderately difficult to achieve.

Blast radius

If exploited, the attacker could gain full control over the system, leading to severe data loss or system compromise.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Chrome version 155.0.8059.39 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.