← All vulnerabilities
CVE-2026-110161

Use after free in Network in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox vi

Published
Last modified
Status
published
Known exploitation
Not listed in CISA KEV
Fix
Fixed in 155.0.8059.79
Public exploit
None on Exploit-DB
CISA SSVC
  • Exploitation: none
  • Automatable: no
  • Technical impact: total
?

Decision points from CISA's Vulnrichment, assessed (SSVC 2.0.3).

SSVC documentation

Summary

Use after free in Network in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Critical)

Affected versions

  • Google Chrome

    From 155.0.8059.79 · fixed in 155.0.8059.79

References 2

chromereleases.googleblog.com

issues.chromium.org