CVE-2026-110141: Google Chrome vulnerability

Q: Who is exposed to this issue?

Users running Google Chrome versions earlier than 155.0.8059.79 are exposed when they visit an attacker-controlled or crafted HTML page.

Q: What does exploitation require?

Exploitation is remote and requires an attacker to induce the target to load a crafted HTML page. The reported impact is leakage of cross-origin data through an observable discrepancy in Media.

Q: What version addresses the issue?

Google Chrome 155.0.8059.79 addresses this issue; versions prior to that release are affected.

Published Oct 13, 2026

Updated

Observable discrepancy in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

Affected Software

1 affected component

Google Chrome<155.0.8059.79

Event History

Oct 13, 2026

CVE Published

via MITRE·09:01 PM

Data Sourced

via MITRE·09:01 PM

DescriptionWeakness

Frequently Asked Questions

Who is exposed to this issue?

Users running Google Chrome versions earlier than 155.0.8059.79 are exposed when they visit an attacker-controlled or crafted HTML page.

What does exploitation require?

Exploitation is remote and requires an attacker to induce the target to load a crafted HTML page. The reported impact is leakage of cross-origin data through an observable discrepancy in Media.

What version addresses the issue?

Google Chrome 155.0.8059.79 addresses this issue; versions prior to that release are affected.