CVE-2026-110916: Improper input validation in Desktop
Published Apr 12, 2026
·Updated
Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Credit
Google
Affected Software
1 affected componentFixes available
Google Chrome<155.0.8059.84
155.0.8059.84
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 155.0.8059.84
Event History
Apr 12, 2026
CVE Published
12:00 AM
Data Sourced
12:00 AM
SeverityWeaknessAffected Software
Oct 15, 2026
CVE Published
via MITRE·10:04 PM
Data Sourced
via MITRE·10:04 PM
DescriptionWeakness
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
1
Which Chrome versions are affected?
Google Chrome for Desktop versions prior to 155.0.8059.84 are affected.
2
What would an attacker need to do to exploit this issue?
The attacker would need to induce a user to process a crafted HTML page remotely.
3
What is the potential impact if exploitation succeeds?
A successful exploit could allow arbitrary code execution outside Chrome's sandbox.