Use After Free Vulnerability in Google Chrome
CVE-2026-110158

8.3HIGH

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
13 October 2026

What is CVE-2026-110158?

A use after free vulnerability exists in the Passwords feature of Google Chrome, prior to version 155.0.8059.79. This flaw allows remote attackers, who have successfully compromised the renderer process, to execute arbitrary code outside the browser's sandbox environment. This can be achieved through specially crafted HTML pages that take advantage of this vulnerability, thereby posing significant security risks to users.

Affected Version(s)

Chrome 155.0.8059.79

References

https://chromereleases.googleblog.com/2026/10/stable-chan...
https://issues.chromium.org/issues/562242421

CVSS V3.1

Score:
8.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.