CVE-2026-110172

Summary

A use-after-free vulnerability in Google Chrome's Media component allows remote attackers to execute arbitrary code within the sandboxed environment when visiting a malicious webpage. This represents a high-severity issue because it can lead to complete system compromise through sandbox escape.

Exploitability

Exploitation requires a user to visit a specially crafted HTML page, making it moderately difficult but possible with social engineering, and relies on the victim's browser being vulnerable (version < 155.0.8059.79).

Blast radius

If exploited, this vulnerability could affect millions of Chrome users who browse the web, potentially leading to widespread remote code execution across desktop and mobile platforms.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Google Chrome version 155.0.8059.79 or later immediately.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.