CVE-2026-110170: Use After Free

Q: Which Chrome versions need to be updated?

Google Chrome versions prior to 155.0.8059.79 are affected. Update to 155.0.8059.79 or later.

Q: What does an attacker need to exploit this issue?

An attacker needs to cause a user to load a crafted HTML page remotely. The disclosed impact is memory disclosure inside the Chrome sandbox.

Q: Is this a sandbox escape?

The available information says the issue allows reading memory inside the sandbox. It does not state that the vulnerability permits escaping the sandbox or executing code outside it.

Published Oct 13, 2026

Updated

Use after free in Bindings in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Affected Software

1 affected component

Google Chrome<155.0.8059.79

Event History

Oct 13, 2026

CVE Published

via MITRE·09:01 PM

Data Sourced

via MITRE·09:01 PM

DescriptionWeakness

Frequently Asked Questions

Which Chrome versions need to be updated?

Google Chrome versions prior to 155.0.8059.79 are affected. Update to 155.0.8059.79 or later.

What does an attacker need to exploit this issue?

An attacker needs to cause a user to load a crafted HTML page remotely. The disclosed impact is memory disclosure inside the Chrome sandbox.

Is this a sandbox escape?

The available information says the issue allows reading memory inside the sandbox. It does not state that the vulnerability permits escaping the sandbox or executing code outside it.