CVE-2026-110145: Use after free in Google Chrome

CVE-2026-110145 is a use-after-free vulnerability in the Passwords feature of Google Chrome versions before 155.0.8059.79. Exploitation requires the attacker to have already compromised the renderer process, after which they can execute arbitrary code outside the sandbox environment via a specially crafted HTML page. The vulnerability is acknowledged by Google with a high severity rating and has been addressed in the stable channel update 155.0.8059.79.

Successful exploitation allows remote code execution outside the sandbox, which can lead to full compromise of the affected system. However, exploitation requires prior compromise of the renderer process, limiting the attack vector to scenarios where the attacker already has some level of access.

A fix is available in Google Chrome version 155.0.8059.79. Users and administrators should update to this version or later to remediate the vulnerability. Refer to the official Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01668083673.html for details.