CVE-2026-110156: Google Chrome vulnerability
Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: High)
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Chrome installations on Mac running versions earlier than 155.0.8059.79 are affected. Exploitation also requires the attacker to have already compromised the renderer process and to use a crafted Chrome extension.
Is this exploitable through normal web content alone?
The available information does not describe a web-content-only attack. It states that the attacker must first compromise Chrome’s renderer process, after which the crafted extension can be used to execute code outside the sandbox.
What is the remediation?
Update Google Chrome on Mac to version 155.0.8059.79 or later.