CVE-2026-110165: Use After Free
Published Oct 13, 2026
·Updated
Use after free in Core in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Affected Software
1 affected component
Google Chrome for Android<155.0.8059.79
Event History
Oct 13, 2026
CVE Published
via MITRE·09:01 PM
Data Sourced
via MITRE·09:01 PM
DescriptionWeakness
Frequently Asked Questions
1
Which installations should be treated as affected?
Google Chrome for Android versions earlier than 155.0.8059.79 are affected. Devices running 155.0.8059.79 or later are not identified as affected by the provided data.
2
What does an attacker need to exploit this issue?
The issue can be exploited remotely through a crafted HTML page. No local device access is described as necessary.
3
Does the provided information establish impact on Chrome for desktop?
No. The affected software listed is Google Chrome for Android, and the provided data does not establish whether desktop Chrome is affected.