CVE-2026-110154

Summary

A use-after-free vulnerability in Google Chrome's Canvas implementation allows remote attackers to execute arbitrary code within the sandboxed environment when visiting a malicious webpage. This represents a critical security flaw because it can lead to full system compromise from a simple web visit.

Exploitability

Exploitation requires a crafted HTML page delivered via web browser, with no additional preconditions needed beyond standard user interaction, making it highly practical for remote attacks.

Blast radius

The vulnerability affects all Chrome users on versions prior to 155.0.8059.79, potentially exposing millions of users to remote code execution through standard web browsing activities.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Google Chrome version 155.0.8059.79 or later immediately.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.