Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.6

Google Chrome before 155.0.8059.84 may run malicious code

CVE-2026-110916 · published 1 day ago
Summary

Versions of Google Chrome older than 155.0.8059.84 do not properly check data from web pages. This could let a remote attacker cause the browser to execute code on the computer, bypassing its security sandbox. Update Chrome to the latest version to fix the issue.

What to do
  • Update google chrome to version 155.0.8059.84 or later.
Affected software
Ecosystem VendorProductAffected versions
– google chrome < 155.0.8059.84
Debian:12 debian chromium All versions
Original advisory text
Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium s...
Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
References
Severity
9.6 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-20Improper Input Validation
Timeline
Published15 Oct 2026
Updated16 Oct 2026
First seen15 Oct 2026
Sources
CVE-2026-110916 · NVD
CVE-2026-110916 · MITRE
DEBIAN-CVE-2026-110916 · OSV
Track software like this
Free during beta