← Back to search

CVE-2026-110153

8.8 HIGH

Published 2026-10-13 · Updated 2026-10-15

AI risk analysis

Summary
A use-after-free vulnerability in Google Chrome's Media component allows remote attackers to execute arbitrary code within the sandboxed environment when visiting a malicious webpage. This represents a high-severity security flaw that could lead to complete system compromise.
Exploitability
Exploitation requires a user to visit a specially crafted HTML page, making it moderately difficult to achieve but possible with social engineering, and relies on the browser's sandboxing bypass capabilities.
Blast radius
If exploited, this vulnerability could affect millions of Chrome users who browse the web, potentially leading to full system compromise through sandbox escape and remote code execution.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Upgrade to Google Chrome version 155.0.8059.79 or later immediately to remediate this use-after-free vulnerability.
rcebrowsersandbox-escapemedia

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses

CWE-416

Vendors

google

Products

chrome

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.