Incorrect Authorization in Google Chrome Updater Allows Code Execution
CVE-2026-110159

9.6CRITICAL

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
13 October 2026

What is CVE-2026-110159?

A vulnerability has been identified in the Updater component of Google Chrome, allowing local attackers to bypass security restrictions. This issue enables the execution of arbitrary code outside of the browser's sandbox environment, potentially compromising systems running versions of Google Chrome prior to 155.0.8059.79. Users are encouraged to update to the latest version to mitigate this security risk.

Affected Version(s)

Chrome 155.0.8059.79

References

https://chromereleases.googleblog.com/2026/10/stable-chan...
https://issues.chromium.org/issues/564573066

CVSS V3.1

Score:
9.6
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.