CVE-2026-110164: Use After Free
Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Affected Software
Event History
Frequently Asked Questions
Which Chrome installations are affected?
Google Chrome versions earlier than 155.0.8059.79 are affected. The issue is described as affecting DOM handling in Chrome.
What does an attacker need to exploit this issue?
An attacker needs to cause Chrome to process a crafted HTML page remotely. Successful exploitation could potentially result in arbitrary code execution inside Chrome's sandbox.
Does exploitation escape Chrome's sandbox?
The available information states that code execution is possible inside the sandbox. It does not state that this vulnerability alone enables a sandbox escape.
What should be done if systems are running an affected version?
Update Google Chrome to version 155.0.8059.79 or later. The provided information does not identify an alternative mitigation for systems that cannot yet be updated.