CVE-2026-110147

Summary

A use-after-free vulnerability in Google Chrome's PDF handling allows remote attackers to execute arbitrary code within the sandboxed environment when viewing a specially crafted HTML page. This represents a critical security flaw because it can lead to full system compromise from a simple web visit.

Exploitability

Exploitation requires a user to visit a malicious webpage with embedded PDF content, making it moderately difficult but not highly complex to achieve, with the main precondition being user interaction.

Blast radius

The vulnerability affects all Chrome users who view PDF content in the browser, potentially impacting millions of users across various industries and increasing the likelihood of successful exploitation.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Google Chrome 155.0.8059.79 or later immediately.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.