CVE-2026-110161
9.6 CRITICALPublished 2026-10-13 · Updated 2026-10-15
AI risk analysis
- Summary
- A use-after-free vulnerability in Google Chrome's Network component allows remote attackers to execute arbitrary code outside the sandbox by sending crafted network traffic. This critical flaw can lead to complete system compromise as it bypasses Chrome's security boundaries.
- Exploitability
- Exploitation requires a remote attacker to craft specific network traffic that triggers the use-after-free condition, making it moderately difficult to exploit without prior knowledge of the memory layout and timing requirements.
- Blast radius
- If exploited, this vulnerability could affect millions of Chrome users who browse the web, as the attack vector is simply receiving crafted network traffic which is common in web browsing scenarios.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- Upgrade to Google Chrome 155.0.8059.79 or later immediately
rcebrowsernetworksandbox-bypass
Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
Use after free in Network in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Critical)
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Weaknesses
CWE-416
Vendors
Products
chrome
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2026-106233
- CRITICALCVE-2026-110142
- CRITICALCVE-2026-110149
- CRITICALCVE-2026-0163
- CRITICALCVE-2026-100202
- CRITICALCVE-2026-100219
- CRITICALCVE-2026-100800
- CRITICALCVE-2026-100804
Related by shared AI tags and CWE weakness class. Browse the full archive.