CVE-2026-106233

Summary

A use-after-free vulnerability in Chrome's Metrics component allows remote attackers with renderer process access to execute arbitrary code outside the sandbox, potentially leading to full system compromise.

Exploitability

Exploitation requires compromising the renderer process first, then crafting a malicious HTML page that triggers the use-after-free condition, making it moderately difficult but achievable with a successful initial compromise.

Blast radius

If exploited, this vulnerability could allow attackers to execute arbitrary code on the user's system with elevated privileges, potentially leading to complete system takeover.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Chrome 155.0.8059.39 or later

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.