CVE-2026-110158: Use after free in Google Chrome

CVE-2026-110158 is a use-after-free vulnerability affecting the Passwords component in Google Chrome versions before 155.0.8059.79. Exploitation requires that the attacker has already compromised the renderer process, after which they can execute arbitrary code outside the sandbox via a specially crafted HTML page. This vulnerability was assigned a high severity rating by Chromium security. Google has issued a stable channel update to fix this issue, as detailed in their official advisory.

Successful exploitation of this vulnerability allows remote code execution outside the sandbox, which can lead to full compromise of the affected system. The attacker must have control over the renderer process to trigger the exploit. This elevates the risk significantly as it bypasses sandbox protections.

Google has released an official stable channel update that fixes this vulnerability in Chrome version 155.0.8059.79. Users and administrators should update to this version or later to remediate the issue. No additional mitigation steps are indicated by the vendor advisory.