CVE-2026-110169

Summary

A use-after-free vulnerability in Google Chrome's V8 JavaScript engine allows remote attackers to execute arbitrary code within the sandbox by crafting a malicious HTML page. This flaw is particularly dangerous because it can be exploited without user interaction and leads to complete system compromise.

Exploitability

Exploitation is moderately difficult requiring a crafted HTML page delivered via web browser, with no user interaction needed once the page is loaded, making it suitable for drive-by attacks.

Blast radius

The vulnerability affects all Chrome users running versions prior to 155.0.8059.79, potentially impacting millions of users with a high likelihood of successful exploitation due to the remote nature and lack of user interaction requirements.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Google Chrome version 155.0.8059.79 or later immediately.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.