CVE-2026-110914: Memory corruption in Workers
Memory corruption in Workers in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 155.0.8059.84
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
Which Chrome versions are affected?
Google Chrome versions prior to 155.0.8059.84 are affected. Updating to 155.0.8059.84 or later removes the affected version range described here.
What does an attacker need to exploit this issue?
The attacker needs to induce a user to process a crafted HTML page remotely. Successful exploitation could potentially execute arbitrary code inside the Chrome sandbox.
Is this a sandbox escape?
No. The described potential code execution is inside the sandbox; the provided information does not state that an attacker can escape the sandbox or execute code on the underlying operating system.