CVE-2026-110151: Use After Free

Q: Which Chrome installations are affected?

Google Chrome versions earlier than 155.0.8059.79 are affected.

Q: What access does an attacker need, and what is the stated execution scope?

A remote attacker would need to induce processing of a crafted HTML page. Successful exploitation allows arbitrary code execution inside the Chrome sandbox; the provided information does not state that sandbox escape is possible.

Published Oct 13, 2026

Updated

Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Affected Software

1 affected component

Google Chrome<155.0.8059.79

Event History

Oct 13, 2026

CVE Published

via MITRE·09:01 PM

Data Sourced

via MITRE·09:01 PM

DescriptionWeakness

Frequently Asked Questions

Which Chrome installations are affected?

Google Chrome versions earlier than 155.0.8059.79 are affected.

What access does an attacker need, and what is the stated execution scope?

A remote attacker would need to induce processing of a crafted HTML page. Successful exploitation allows arbitrary code execution inside the Chrome sandbox; the provided information does not state that sandbox escape is possible.