CVE-2026-15110 is a use-after-free vulnerability in the Extensions feature of Google Chrome before version 150.0.7871.115. An attacker could exploit this by tricking a user into installing a crafted malicious extension, potentially leading to heap corruption. The vulnerability is rated high severity with a CVSS 3.1 base score of 8.8, indicating network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability. The vendor advisory linked indicates a stable channel update addressing this issue, implying a fix is available in version 150.0.7871.115.

Successful exploitation could lead to heap corruption, potentially allowing an attacker to execute arbitrary code or cause a denial of service. The attack requires user interaction in the form of installing a malicious extension. The vulnerability affects confidentiality, integrity, and availability of the affected system.

Users should update Google Chrome to version 150.0.7871.115 or later, where this vulnerability is fixed. The vendor advisory confirms a stable channel update addressing this issue. No additional mitigation steps are indicated by the vendor.