CVE-2026-106234

Summary

This flaw involves a use after free vulnerability in Network in Google Chrome prior to 155.0.8059.39, allowing remote attackers to potentially execute arbitrary code outside the sandbox via a crafted Chrome extension.

Exploitability

Exploitation requires social engineering to trick a user into installing a crafted Chrome extension, making it moderately difficult.

Blast radius

If exploited, the attacker could potentially execute arbitrary code outside the sandbox, leading to a high impact on the system's security.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Chrome version 155.0.8059.39 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.