CVE-2026-106329

Summary

This flaw in Google Chrome prior to 155.0.8059.39 allows a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page, leveraging social engineering.

Exploitability

Exploitation is moderately difficult and requires the attacker to trick the user into opening a crafted HTML page.

Blast radius

If exploited, the attacker could potentially gain full control over the affected system, leading to severe data loss or system compromise.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Google Chrome 155.0.8059.39 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.