CVE-2026-110168

Summary

A use-after-free vulnerability in Google Chrome's V8 JavaScript engine allows remote attackers to execute arbitrary code within the sandboxed environment by crafting a malicious HTML page. This represents a critical security flaw because it can lead to full system compromise when users visit compromised websites.

Exploitability

Exploitation requires a remote attacker to craft a specific HTML page that triggers the use-after-free condition, which is moderately difficult but achievable with knowledge of V8 internals and sandbox escape techniques.

Blast radius

The vulnerability affects all Chrome users on versions prior to 155.0.8059.79, making it highly impactful across a large user base that frequently visits websites.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Chrome version 155.0.8059.79 or later immediately.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.