CVE-2026-110157

Summary

A use-after-free vulnerability in Google Chrome's SVG handling allows remote attackers to execute arbitrary code within the sandboxed browser environment. This represents a critical security flaw because it can be exploited without user interaction and leads to complete system compromise.

Exploitability

Exploitation is moderately difficult as it requires crafting a specific HTML page with malicious SVG content, but the attack surface is broad since most web browsing involves SVG rendering.

Blast radius

The vulnerability affects all Chrome users on versions prior to 155.0.8059.79, making it highly impactful across the entire Chrome user base with potential for widespread remote code execution.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Chrome version 155.0.8059.79 or later immediately.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.