CVE-2026-110149

Summary

A use-after-free vulnerability in Google Chrome's Browser component allows remote attackers to execute arbitrary code outside the sandbox by crafting a malicious HTML page. This critical flaw enables attackers to bypass Chrome's security boundaries and gain full system access.

Exploitability

Exploitation requires a user to visit a crafted webpage, making it moderately difficult but highly effective once achieved, with no additional preconditions needed.

Blast radius

The vulnerability affects all Chrome users on versions prior to 155.0.8059.79, potentially exposing millions of users to remote code execution attacks through web browsing activities.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Google Chrome version 155.0.8059.79 or later immediately.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.