CVE-2026-110152: Buffer Overflow

Q: Which deployments are affected?

Google Chrome on Android versions prior to 155.0.8059.79 are affected. The provided information does not identify impact to Chrome on other platforms.

Q: What does exploitation require?

An attacker would need to cause a user to load a crafted HTML page remotely. Successful exploitation could potentially result in arbitrary code execution outside the browser sandbox.

Q: Is there a configuration-based mitigation if updates cannot be installed immediately?

No configuration workaround or temporary mitigation is provided. The available remediation is updating Chrome on Android to version 155.0.8059.79 or later.

Published Oct 13, 2026

Updated

Buffer overflow in ANGLE in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Affected Software

1 affected component

Google Chrome<155.0.8059.79

Event History

Oct 13, 2026

CVE Published

via MITRE·09:01 PM

Data Sourced

via MITRE·09:01 PM

DescriptionWeakness

Frequently Asked Questions

Which deployments are affected?

Google Chrome on Android versions prior to 155.0.8059.79 are affected. The provided information does not identify impact to Chrome on other platforms.

What does exploitation require?

An attacker would need to cause a user to load a crafted HTML page remotely. Successful exploitation could potentially result in arbitrary code execution outside the browser sandbox.

Is there a configuration-based mitigation if updates cannot be installed immediately?

No configuration workaround or temporary mitigation is provided. The available remediation is updating Chrome on Android to version 155.0.8059.79 or later.