{"id":"CVE-2026-110161","published":"2026-10-13T22:17:36.050","lastModified":"2026-10-15T04:18:20.760","description":"Use after free in Network in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Critical)","cvssScore":9.6,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cwes":["CWE-416"],"vendors":["google"],"products":["chrome"],"references":[{"url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01668083673.html","tags":["Release Notes","Vendor Advisory"]},{"url":"https://issues.chromium.org/issues/568826881","tags":["Permissions Required"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A use-after-free vulnerability in Google Chrome's Network component allows remote attackers to execute arbitrary code outside the sandbox by sending crafted network traffic. This critical flaw can lead to complete system compromise as it bypasses Chrome's security boundaries.","exploitability":"Exploitation requires a remote attacker to craft specific network traffic that triggers the use-after-free condition, making it moderately difficult to exploit without prior knowledge of the memory layout and timing requirements.","blast_radius":"If exploited, this vulnerability could affect millions of Chrome users who browse the web, as the attack vector is simply receiving crafted network traffic which is common in web browsing scenarios.","remediation":"Upgrade to Google Chrome 155.0.8059.79 or later immediately","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","browser","network","sandbox-bypass"],"model":"garnet-coder","analyzedAt":"2026-10-15T08:54:35.412Z"}}