CVE-2026-110165: Use after free in Core
Chromium CVE-2026-110165: Use after free
Other sources
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
— Microsoft
Use after free in Core in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
— MITRE
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 155.0.8059.79 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 155.0.4283.60 - Upgrade
Upgrade
Google Chrome on Androidto a version that resolves this vulnerability.Fixed in 155.0.8059.79
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2026-110152
- CVE-2026-110149
- CVE-2026-110136
- CVE-2026-110161
- CVE-2026-110148
- CVE-2026-110151
- CVE-2026-110162
- CVE-2026-110170
- CVE-2026-110160
- CVE-2026-110143
- CVE-2026-110146
- CVE-2026-110150
- CVE-2026-110156
- CVE-2026-110137
- CVE-2026-110140
- CVE-2026-110158
- CVE-2026-110145
- CVE-2026-110159
- CVE-2026-110144
- CVE-2026-110153
- CVE-2026-110166
- CVE-2026-110169
- CVE-2026-110168
- CVE-2026-110139
- CVE-2026-110172
- CVE-2026-110164
- CVE-2026-110163
- CVE-2026-110141
- CVE-2026-110138
- CVE-2026-110157
- CVE-2026-110147
- CVE-2026-110154
- CVE-2026-110155
- CVE-2026-110167
- CVE-2026-110171
- CVE-2026-110142
Frequently Asked Questions
Which installations should be treated as affected?
Google Chrome for Android versions earlier than 155.0.8059.79 are affected. Devices running 155.0.8059.79 or later are not identified as affected by the provided data.
What does an attacker need to exploit this issue?
The issue can be exploited remotely through a crafted HTML page. No local device access is described as necessary.
Does the provided information establish impact on Chrome for desktop?
No. The affected software listed is Google Chrome for Android, and the provided data does not establish whether desktop Chrome is affected.