← Back to search

CVE-2026-110161

9.6 CRITICAL

Published 2026-10-13 · Updated 2026-10-15

AI risk analysis

Summary
A use-after-free vulnerability in Google Chrome's Network component allows remote attackers to execute arbitrary code outside the sandbox by sending crafted network traffic. This critical flaw can lead to complete system compromise as it bypasses Chrome's security boundaries.
Exploitability
Exploitation requires a remote attacker to craft specific network traffic that triggers the use-after-free condition, making it moderately difficult to exploit without prior knowledge of the memory layout and timing requirements.
Blast radius
If exploited, this vulnerability could affect millions of Chrome users who browse the web, as the attack vector is simply receiving crafted network traffic which is common in web browsing scenarios.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Upgrade to Google Chrome 155.0.8059.79 or later immediately
rcebrowsernetworksandbox-bypass

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

Use after free in Network in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Critical)

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Weaknesses

CWE-416

Vendors

google

Products

chrome

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.