CVE-2026-106190

Summary

A use-after-free vulnerability in Google Chrome prior to 155.0.8059.39 allowed remote attackers to execute arbitrary code within the sandbox via a crafted HTML page, posing a significant security risk.

Exploitability

Exploitation requires a crafted HTML page and a remote attacker with the ability to trick a user into visiting the page. The vulnerability is high risk due to the potential for arbitrary code execution.

Blast radius

If exploited, this flaw could allow a remote attacker to fully compromise the affected system, leading to data theft, system damage, or complete control of the user's device.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Chrome version 155.0.8059.39 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.