CVE-2026-110165

Summary

A use-after-free vulnerability in Google Chrome's Core component on Android allows remote attackers to execute arbitrary code outside the sandbox by crafting a malicious HTML page. This critical flaw enables attackers to potentially take full control of affected devices.

Exploitability

Exploitation requires a user to visit a crafted webpage, making it moderately difficult but highly effective once achieved, with no special preconditions needed beyond browser access.

Blast radius

The vulnerability affects all Android users running Chrome versions prior to 155.0.8059.79, potentially exposing millions of devices to remote code execution attacks through web browsing.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Chrome for Android version 155.0.8059.79 or later immediately.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.