CVE-2026-110143: Google Chrome vulnerability

Q: Which Chrome versions need to be updated?

Google Chrome versions prior to 155.0.8059.79 are affected. Update Chrome to 155.0.8059.79 or a later version.

Q: What must an attacker do to exploit this issue?

The attacker must cause Chrome to process a crafted file. Successful exploitation could allow the attacker to potentially read memory within Chrome’s sandbox.

Q: Does exploitation escape the Chrome sandbox?

The available information describes memory disclosure inside the sandbox only. It does not state that the issue enables a sandbox escape or code execution.

Published Oct 13, 2026

Updated

Use of uninitialized variable in ThirdParty lmzasdk in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially read memory inside the sandbox via a crafted file. (Chromium security severity: High)

Affected Software

1 affected component

Google Chrome<155.0.8059.79

Event History

Oct 13, 2026

CVE Published

via MITRE·09:01 PM

Data Sourced

via MITRE·09:01 PM

DescriptionWeakness

Frequently Asked Questions

Which Chrome versions need to be updated?

Google Chrome versions prior to 155.0.8059.79 are affected. Update Chrome to 155.0.8059.79 or a later version.

What must an attacker do to exploit this issue?

The attacker must cause Chrome to process a crafted file. Successful exploitation could allow the attacker to potentially read memory within Chrome’s sandbox.

Does exploitation escape the Chrome sandbox?

The available information describes memory disclosure inside the sandbox only. It does not state that the issue enables a sandbox escape or code execution.