CVE-2026-110917: Memory corruption in SVG
Memory corruption in SVG in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read memory via a crafted HTML page. (Chromium security severity: High)
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 155.0.8059.84
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
Which Chrome installations are affected?
Google Chrome versions prior to 155.0.8059.84 are affected. The provided release reference identifies this as a desktop stable-channel update.
What does an attacker need to exploit this issue?
An attacker needs to induce a user to load a crafted HTML page containing malicious SVG content. The reported impact is remote memory disclosure.
How can I determine whether a system is vulnerable?
Check the installed Google Chrome version. Systems running a version earlier than 155.0.8059.84 should be treated as affected.