CVE-2026-95311 is a memory management vulnerability in Google Chrome's Fonts component affecting versions before 154.0.8037.57. The flaw involves freeing non-heap memory improperly, which can be exploited by an attacker who convinces a user to visit a maliciously crafted HTML page. Successful exploitation could lead to arbitrary code execution outside the sandbox environment, increasing the risk of system compromise. The vulnerability is assigned a medium severity level by the Chromium security team. The vendor advisory linked indicates a stable channel update addressing this issue.

Exploitation of this vulnerability allows remote attackers to execute arbitrary code outside the sandbox by tricking users into visiting a crafted HTML page. This could lead to unauthorized code execution on the affected system, potentially compromising user data or system integrity. However, the severity is rated medium, indicating that while impactful, the exploit complexity or conditions may limit widespread exploitation.

A fix for this vulnerability is available in Google Chrome version 154.0.8037.57. Users and administrators should update to this version or later to remediate the issue. Refer to the official Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html for detailed update instructions.