CVE-2026-110163

Summary

A use-after-free vulnerability in Google Chrome's DOM handling allows remote attackers to execute arbitrary code within the sandboxed environment when visiting a malicious webpage. This represents a high-severity security flaw that could lead to complete system compromise.

Exploitability

Exploitation requires a user to visit a specially crafted HTML page, making it moderately difficult to achieve but possible through social engineering or drive-by downloads with minimal user interaction required.

Blast radius

If exploited, this vulnerability could affect millions of Chrome users who browse the web, potentially leading to widespread remote code execution across various operating systems where Chrome is installed.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Google Chrome version 155.0.8059.79 or later immediately to remediate this use-after-free vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.