CVE-2026-110167

Summary

A use-after-free vulnerability in Google Chrome's Media component allows remote attackers to execute arbitrary code within the sandboxed browser environment when visiting a malicious webpage. This represents a critical security flaw that can lead to full system compromise.

Exploitability

Exploitation requires a user to visit a specially crafted HTML page, making it moderately difficult but possible with social engineering, and relies on the browser's sandboxing mechanism being bypassed to achieve code execution.

Blast radius

The vulnerability affects all Chrome users who visit malicious websites, potentially leading to widespread remote code execution across desktop and mobile platforms with significant impact on enterprise environments.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Google Chrome 155.0.8059.79 or later immediately.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.