CVE-2026-110159

Incorrect authorization in Updater in Google Chrome prior to 155.0.8059.79 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

CVE-2026-110159

Google Chrome versions prior to 155.0.8059.79 are vulnerable to an incorrect authorization flaw in the Updater component. A local attacker can exploit this flaw to execute arbitrary code outside the sandbox via a local program. Remediation is provided in the 155.0.8059.79 update for Windows, Mac,...

CVE-2026-110159

Incorrect authorization in Updater in Google Chrome prior to 155.0.8059.79 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

CVE-2026-110144

Incorrect authorization in Mojo in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

CVE-2026-110145

Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-110158

Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-110145

A use after free vulnerability exists in the Passwords component of Google Chrome prior to version 155.0.8059.79 . A remote attacker who has successfully compromised the renderer process can exploit this flaw via a crafted HTML page to achieve arbitrary code execution outside the sandbox. Remedia...

CVE-2026-110158

A Use after free vulnerability exists in the Passwords component of Google Chrome prior to version 155.0.8059.79 . A remote attacker who successfully compromises the renderer process can leverage this flaw to execute arbitrary code outside the sandbox by navigating to a crafted HTML page. Remedia...

CVE-2026-110144

Google Chrome on Windows experienced an incorrect authorization flaw in the Mojo component. This vulnerability allowed a local attacker to potentially execute arbitrary code outside the sandbox using a local program. The issue was addressed in version 155.0.8059.79 for Windows and Mac, and 155.0....

CVE-2026-110156

Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted Chrome extension. Chromium security severity: High...

CVE-2026-110137

Use after free in WebRTC in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-110140

Type confusion in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-110140

A type confusion flaw exists in the V8 component of the Google Chrome browser, affecting versions prior to 155.0.8059.79 . This vulnerability allows a remote attacker to execute arbitrary code inside the sandbox by interacting with a crafted HTML page. The issue has been addressed in the stable c...

CVE-2026-110156

Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted Chrome extension. Chromium security severity: High...

CVE-2026-110140

Type confusion in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-110156

Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted Chrome extension. Chromium security severity: High...

CVE-2026-110137

Use after free in WebRTC in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-110137

A Use after free flaw was identified in the WebRTC component of Google Chrome prior to version 155.0.8059.79 . This vulnerability allows a remote attacker to execute arbitrary code inside the sandbox by navigating to a crafted HTML page . The impact is categorized as High severity. Remediation is...

CVE-2026-110140

Type confusion in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-110156

Google Chrome on Mac versions prior to 155.0.8059.79 is vulnerable to an incorrect reference resolution flaw in the Extensions component. A remote attacker who has already compromised the renderer process can leverage this vulnerability to execute arbitrary code outside the sandbox using a crafte...