CVE-2026-110154: Use After Free
Published Oct 13, 2026
·Updated
Use after free in Canvas in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Affected Software
1 affected component
Google Chrome<155.0.8059.79
Event History
Oct 13, 2026
CVE Published
via MITRE·09:01 PM
Data Sourced
via MITRE·09:01 PM
DescriptionWeakness
Frequently Asked Questions
1
Who is exposed to this issue?
Users of Google Chrome versions earlier than 155.0.8059.79 are exposed when they visit or render a crafted HTML page.
2
What does an attacker need to exploit it?
The issue can be triggered remotely through a crafted HTML page. The described impact is potential arbitrary code execution inside Chrome's sandbox.
3
What version fixes the issue?
Update Google Chrome to version 155.0.8059.79 or later.