CVE-2026-106291

Summary

This flaw involves a use-after-free vulnerability in Google Chrome's GarbageCollection prior to version 155.0.8059.39, allowing remote attackers to execute arbitrary code within a sandboxed environment via a crafted HTML page.

Exploitability

Exploitation requires a crafted HTML page and a remote attacker with the ability to deliver the payload. The attacker must also have the capability to trigger the vulnerability.

Blast radius

If exploited, the flaw could result in the execution of arbitrary code within the sandboxed environment, potentially leading to full system compromise.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Google Chrome version 155.0.8059.39 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.