CVE-2026-110139

Summary

A use-after-free vulnerability in Google Chrome's Media component allows remote attackers to execute arbitrary code within the sandboxed environment when visiting a malicious webpage. This represents a critical security flaw because it can lead to full system compromise from a simple web visit.

Exploitability

Exploitation requires a user to visit a specially crafted HTML page, making it moderately difficult but still highly impactful since most users will encounter such pages through phishing or compromised websites.

Blast radius

The vulnerability affects all Chrome users on versions prior to 155.0.8059.79, potentially exposing millions of users to remote code execution attacks that could lead to complete system compromise.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Google Chrome version 155.0.8059.79 or later immediately.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.