CVE-2026-110151

Summary

A use-after-free vulnerability in Google Chrome's media handling allows remote attackers to execute arbitrary code within the sandboxed environment when visiting a malicious webpage. This critical flaw enables attackers to potentially take full control of a user's browser session.

Exploitability

Exploitation requires a user to visit a specially crafted HTML page, making it moderately difficult but achievable through social engineering or drive-by downloads with relatively few preconditions.

Blast radius

If exploited, this vulnerability could impact millions of Chrome users who browse the web, potentially leading to complete browser compromise and access to sensitive user data.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Google Chrome version 155.0.8059.79 or later immediately.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.