CVE-2026-110142

Summary

A use-after-free vulnerability in Google Chrome's FileSystem API allows remote attackers to execute arbitrary code outside the sandbox by crafting a malicious HTML page. This critical flaw enables attackers to bypass Chrome's security boundaries and run malicious code with the privileges of the browser process.

Exploitability

Exploitation requires a victim to visit a crafted HTML page, making it moderately difficult but achievable through social engineering or compromised websites, with no additional preconditions beyond browser interaction.

Blast radius

If exploited, this vulnerability could impact millions of Chrome users who browse the web, potentially leading to full system compromise through arbitrary code execution in the browser context.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Google Chrome 155.0.8059.79 or later

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.