CVE-2026-110172: Use After Free

Q: Which Chrome installations are affected?

Google Chrome versions prior to 155.0.8059.79 are affected.

Q: What would an attacker need to trigger the issue?

A remote attacker would need to cause Chrome to process a crafted HTML page. Successful exploitation can execute arbitrary code inside the Chrome sandbox.

Published Oct 13, 2026

Updated

Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Affected Software

1 affected component

Google Chrome<155.0.8059.79

Event History

Oct 13, 2026

CVE Published

via MITRE·09:01 PM

Data Sourced

via MITRE·09:01 PM

DescriptionWeakness

Frequently Asked Questions

Which Chrome installations are affected?

Google Chrome versions prior to 155.0.8059.79 are affected.

What would an attacker need to trigger the issue?

A remote attacker would need to cause Chrome to process a crafted HTML page. Successful exploitation can execute arbitrary code inside the Chrome sandbox.