CVE-2026-110162

Summary

A use-after-free vulnerability in Google Chrome's desktop version allows remote attackers to execute arbitrary code within the sandbox by crafting a malicious HTML page. This flaw is particularly dangerous because it can be exploited without user interaction and leads to complete system compromise.

Exploitability

Exploitation is moderately difficult requiring a crafted HTML page delivered via web browser, with no user interaction needed once the page is loaded, making it suitable for drive-by download attacks.

Blast radius

The vulnerability affects all Chrome desktop users running versions prior to 155.0.8059.79, potentially impacting millions of users and allowing attackers to gain full system control through a single compromised webpage.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Google Chrome version 155.0.8059.79 or later immediately.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.