CVE-2026-110916

Summary

Chrome's Desktop version had a vulnerability in input validation that could allow remote attackers to execute arbitrary code outside the sandbox through malicious HTML pages. This represents a critical security flaw because it enables full system compromise without user interaction.

Exploitability

Exploitation requires a remote attacker to host a malicious HTML page that triggers the validation flaw, with users needing to visit the page in Chrome Desktop for successful execution.

Blast radius

The impact could be widespread as Chrome Desktop is commonly used for web browsing, potentially affecting millions of users who might encounter malicious pages in emails, websites, or social media.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Chrome Desktop version 155.0.8059.84 or later

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.