CVE-2026-106373

Summary

This flaw involves a use after free vulnerability in the Fonts component of Google Chrome on Windows, allowing remote attackers to execute arbitrary code within a sandbox via a crafted HTML page. This is significant because it can lead to privilege escalation and unauthorized code execution.

Exploitability

Exploiting this flaw requires a remote attacker to craft a specific HTML page and trick a user into opening it. The attacker must have the ability to control the content of the page and the user's interaction with it.

Blast radius

If exploited, this vulnerability could allow a remote attacker to execute arbitrary code within the sandbox, potentially leading to full system compromise and unauthorized access to sensitive data.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Google Chrome version 155.0.8059.39 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.