CVE-2026-106417

Summary

This flaw involves an integer overflow in Google Chrome prior to version 155.0.8059.39, allowing a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.

Exploitability

Exploitation is relatively straightforward given the attacker can craft a specific HTML page to trigger the overflow, requiring the victim to visit the page.

Blast radius

If exploited, this flaw could result in full system compromise, as the attacker could execute arbitrary code outside the sandbox.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Chrome version 155.0.8059.39 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.