CVE-2026-110921: Use after free in V8
Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 155.0.8059.84
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
Which Chrome versions are affected?
Google Chrome versions prior to 155.0.8059.84 are affected. Updating to 155.0.8059.84 or later addresses the affected version range described.
What does an attacker need to exploit this issue?
An attacker needs to cause a user to process a crafted HTML page remotely. Successful exploitation can execute arbitrary code inside the Chrome sandbox.
Are users exposed through ordinary web browsing?
Yes. The issue is triggered by crafted HTML content, so users who visit attacker-controlled or otherwise malicious web pages could be exposed.