CVE-2026-106292

Summary

A buffer overflow vulnerability in Google Chrome's font handling allows remote attackers to execute arbitrary code outside the sandbox after compromising the renderer process. This represents a critical escalation path from renderer compromise to system-level code execution.

Exploitability

Exploitation requires initial compromise of the renderer process, making it moderately difficult but achievable through a preceding vulnerability, with the attacker needing to craft a malicious HTML page that triggers the buffer overflow during font processing.

Blast radius

If exploited, this vulnerability could allow attackers to execute arbitrary code on the victim's system with the privileges of the Chrome process, potentially leading to full system compromise through additional attacks.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Google Chrome version 155.0.8059.39 or later

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.