← All vulnerabilities
CVE-2026-110149

Use after free in Browser in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox vi

Published
Last modified
Status
published
Known exploitation
Not listed in CISA KEV
Fix
Fixed in 155.0.8059.79
Public exploit
None on Exploit-DB
CISA SSVC
  • Exploitation: none
  • Automatable: no
  • Technical impact: total
?

Decision points from CISA's Vulnrichment, assessed (SSVC 2.0.3).

SSVC documentation

Summary

Use after free in Browser in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Affected versions

  • Google Chrome

    From 155.0.8059.79 · fixed in 155.0.8059.79

References 2

chromereleases.googleblog.com

issues.chromium.org