CVE-2026-106375

Summary

This flaw involves incomplete cleanup in Dawn, the rendering engine of Google Chrome prior to version 155.0.8059.39, allowing remote attackers to execute arbitrary code outside the sandbox via a crafted HTML page.

Exploitability

Exploitation is relatively straightforward requiring a crafted HTML page to be viewed by a user. Precondition is the user must open the malicious page.

Blast radius

If exploited, the flaw could result in full system compromise, as arbitrary code execution outside the sandbox would grant the attacker complete control over the affected system.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Google Chrome 155.0.8059.39 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.