CVE-2026-106393

Summary

A use-after-free vulnerability in Google Chrome's Storage component allows remote attackers who have already compromised the renderer process to execute arbitrary code outside the sandbox. This represents a critical escalation path from renderer compromise to full system compromise.

Exploitability

Exploitation requires a compromised renderer process and a crafted HTML page, making it moderately difficult but achievable with a successful initial compromise.

Blast radius

If exploited, this vulnerability could allow attackers to execute arbitrary code on the target system with the privileges of the Chrome process, potentially leading to full system compromise.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Google Chrome version 155.0.8059.39 or later

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.