Remote Code Execution Vulnerability in Google Chrome Extensions
CVE-2026-110156

8.3HIGH

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
13 October 2026

What is CVE-2026-110156?

A vulnerability in Google Chrome's handling of extensions on Mac allows remote attackers to execute arbitrary code outside the browser's sandbox. This occurs through an incorrect reference resolution issue that can be exploited once the renderer process is compromised. Users of affected versions should update to ensure their systems are protected.

Affected Version(s)

Chrome 155.0.8059.79

References

https://chromereleases.googleblog.com/2026/10/stable-chan...
https://issues.chromium.org/issues/561892119

CVSS V3.1

Score:
8.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.