CVE-2026-110159: Google Chrome vulnerability
Incorrect authorization in Updater in Google Chrome prior to 155.0.8059.79 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Google Chrometo a version that resolves this vulnerability.Fixed in 155.0.8059.79
Event History
Frequently Asked Questions
Who is able to exploit this issue?
An attacker needs local access and the ability to run a local program on the affected system. The issue enables arbitrary code execution outside the Chrome sandbox.
Which Chrome versions are affected?
Google Chrome versions prior to 155.0.8059.79 are affected. Updating to 155.0.8059.79 or later addresses the affected version range described.
Are default Chrome installations affected?
The available information identifies the vulnerable component as Chrome Updater but does not state whether exploitation depends on a non-default updater configuration or setting.