CVE-2026-110159

Summary

Chrome's updater component had incorrect authorization checks that allowed local attackers to execute arbitrary code outside the sandbox, potentially leading to full system compromise. This vulnerability affects versions prior to 155.0.8059.79.

Exploitability

Exploitation requires a local attacker with access to run a program, which is moderately easy as it only needs local execution privileges and doesn't require user interaction or complex preconditions.

Blast radius

The impact could be severe across all Chrome users on affected systems, potentially allowing attackers to execute arbitrary code with system-level privileges outside the browser sandbox.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Chrome version 155.0.8059.79 or later immediately.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.