CVE-2026-110163: Use After Free

Q: Which Chrome installations need to be remediated?

Google Chrome versions prior to 155.0.8059.79 are affected. Update to 155.0.8059.79 or a later version.

Q: What must an attacker do to trigger the issue?

The attacker needs to cause Chrome to process a crafted HTML page. The issue can be exploited remotely.

Q: What is the stated impact of successful exploitation?

Successful exploitation allows arbitrary code execution inside the Chrome sandbox. The provided information does not state that the vulnerability enables a sandbox escape.

Published Oct 13, 2026

Updated

Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Affected Software

1 affected component

Google Chrome<155.0.8059.79

Event History

Oct 13, 2026

CVE Published

via MITRE·09:01 PM

Data Sourced

via MITRE·09:01 PM

DescriptionWeakness

Frequently Asked Questions

Which Chrome installations need to be remediated?

Google Chrome versions prior to 155.0.8059.79 are affected. Update to 155.0.8059.79 or a later version.

What must an attacker do to trigger the issue?

The attacker needs to cause Chrome to process a crafted HTML page. The issue can be exploited remotely.

What is the stated impact of successful exploitation?

Successful exploitation allows arbitrary code execution inside the Chrome sandbox. The provided information does not state that the vulnerability enables a sandbox escape.