Threat database

CVE-2026-110168 is a use-after-free vulnerability in the V8 JavaScript engine of Google Chrome prior to version 155.0.8059.79. This flaw allows a remote attacker to execute arbitrary code within the browser sandbox by delivering a crafted HTML page. The vulnerability is rated high severity with a CVSS score of 8.8.

CVE-2026-110169 is a use-after-free vulnerability in the V8 JavaScript engine of Google Chrome prior to version 155.0.8059.79. This flaw allows a remote attacker to execute arbitrary code within the browser sandbox by delivering a crafted HTML page. The vulnerability has a high severity rating with a CVSS score of 8.8.

A buffer overflow vulnerability exists in the Animation component of Google Chrome versions prior to 155.0.8059.79. This flaw allows a remote attacker to execute arbitrary code within the sandbox by delivering a crafted HTML page. The vulnerability has a high severity rating with a CVSS score of 8.8.

CVE-2026-110153 is a use-after-free vulnerability in the Media component of Google Chrome prior to version 155.0.8059.79. This flaw allows a remote attacker to execute arbitrary code within the browser's sandbox by tricking a user into visiting a crafted HTML page. The vulnerability has a high severity rating with a CVSS score of 8.8. Google has released an official fix in Chrome version 155.0.8059.79.

CVE-2026-110144 is a critical vulnerability in Google Chrome on Windows prior to version 155.0.8059.79. It involves incorrect authorization in the Mojo component, allowing a local attacker to potentially execute arbitrary code outside the sandbox. This flaw could lead to full compromise of the affected system if exploited.

CVE-2026-110159 is a critical vulnerability in Google Chrome's Updater component prior to version 155.0.8059.79. It involves incorrect authorization that allows a local attacker to execute arbitrary code outside the sandbox. This flaw affects desktop versions of Chrome before the fixed release and has a high CVSS score of 9.6, indicating severe impact on confidentiality, integrity, and availability.

A use-after-free vulnerability in the Passwords component of Google Chrome prior to version 155.0.8059.79 allows a remote attacker who has compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. This vulnerability has a high severity rating and affects versions before 155.0.8059.79.

CVE-2026-110158 is a use-after-free vulnerability in the Passwords component of Google Chrome prior to version 155.0.8059.79. It allows a remote attacker who has compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. The vulnerability has a high severity rating with a CVSS score of 8.3.

A type confusion vulnerability exists in the V8 JavaScript engine of Google Chrome prior to version 155.0.8059.79. This flaw allows a remote attacker to execute arbitrary code within the browser sandbox by crafting a malicious HTML page. The vulnerability has a high severity rating and a CVSS score of 8.8.

A use-after-free vulnerability exists in the WebRTC component of Google Chrome prior to version 155.0.8059.79. This flaw allows a remote attacker to execute arbitrary code within the sandbox by tricking a user into visiting a crafted HTML page. The vulnerability is rated high severity with a CVSS score of 8.8.

CVE-2026-110156 is a high-severity vulnerability in Google Chrome on Mac platforms prior to version 155.0.8059.79. It involves incorrect reference resolution in Chrome Extensions, which allows a remote attacker who has compromised the renderer process to execute arbitrary code outside the sandbox. This vulnerability affects Chrome versions before 155.0.8059.79 and has a CVSS score of 8.3, indicating a significant risk. Google has published an official fix in version 155.0.8059.79.

A privilege elevation vulnerability exists in the Google Chrome Installer on Windows versions prior to 155.0.8059.79. This flaw allows a local attacker to obtain sensitive information by exploiting the installer component. The vulnerability has been assigned CVE-2026-110150 and is rated with medium severity. A fix is available in version 155.0.8059.79.

An information leak vulnerability exists in Google Chrome versions prior to 155.0.8059.79. This flaw allows a remote attacker to obtain sensitive password information by tricking a user into visiting a crafted HTML page. The vulnerability requires user interaction and is rated with medium severity.

A use of uninitialized variable vulnerability exists in the ThirdParty lmza_sdk component of Google Chrome before version 155.0.8059.79. This flaw could allow a remote attacker to potentially read memory inside the sandbox by using a crafted file. The vulnerability has a CVSS score of 4.3, indicating medium severity.

CVE-2026-110160 is a vulnerability in Google Chrome's ReadingMode prior to version 155.0.8059.79. It involves missing authorization that could allow a remote attacker, who has compromised the renderer process and used social engineering, to potentially bypass site isolation via a crafted HTML page. The vulnerability has a medium severity rating with a CVSS score of 4.2.

A use-after-free vulnerability exists in the Bindings component of Google Chrome prior to version 155.0.8059.79. This flaw allows a remote attacker to read memory inside the sandbox by delivering a crafted HTML page. The vulnerability has a CVSS score of 4.3, indicating medium severity.

CVE-2026-110162 is a use-after-free vulnerability in Google Chrome Desktop versions prior to 155.0.8059.79. It allows a remote attacker to execute arbitrary code inside the sandbox by crafting a malicious HTML page. The vulnerability has a high severity rating with a CVSS score of 8.8.

CVE-2026-110151 is a use-after-free vulnerability in the Media component of Google Chrome prior to version 155.0.8059.79. This flaw allows a remote attacker to execute arbitrary code within the sandbox by delivering a crafted HTML page. The vulnerability is rated with a high severity CVSS score of 8.8.

CVE-2026-110148 is a use-after-free vulnerability in the SVG component of Google Chrome prior to version 155.0.8059.79. This flaw allows a remote attacker to execute arbitrary code within the browser's sandbox by delivering a crafted HTML page. The vulnerability is rated with a high severity CVSS score of 8.8. A fix is available in Chrome version 155.0.8059.79.

CVE-2026-110165 is a critical use-after-free vulnerability in the Core component of Google Chrome on Android versions prior to 155.0.8059.79. This flaw allows a remote attacker to potentially execute arbitrary code outside the browser sandbox by tricking a user into visiting a crafted HTML page. The vulnerability has a high CVSS score of 9.6, indicating severe impact on confidentiality, integrity, and availability.