CVE-2026-106401

Summary

This flaw involves an out-of-bounds write vulnerability in Google Chrome prior to version 155.0.8059.39, allowing a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.

Exploitability

Exploitation requires a user to open a crafted HTML page, making it moderately difficult to exploit in a real-world scenario.

Blast radius

If exploited, the impact could be severe, as it allows execution of arbitrary code outside the sandbox, potentially leading to full system compromise.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Chrome version 155.0.8059.39 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.