Description
Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Published: 2026-10-06
Score: 8.8 High
EPSS: < 1% Very Low
KEV: No
Impact: Remote Code Execution within Chromium sandbox
Action: Patch immediately
AI Analysis

Impact

A use‑after‑free flaw in Chrome’s Track component allows a malicious, crafted HTML page to trigger memory corruption and execute arbitrary code inside the browser’s sandbox. The vulnerability is rated critical by Chromium, indicating that an attacker can potentially run native code with the privileges granted to the sandboxed process.

Affected Systems

The defect resides in Google Chrome prior to build 155.0.8059.39. All users running versions earlier than this build are affected; the issue is addressed in the 155.0.8059.39 release and later.

Risk and Exploitability

The CVSS score of 8.8 highlights high severity, while no EPSS data is currently available and the vulnerability is not listed in CISA’s KEV catalog. The likely attack vector consists of a remote attacker hosting a malicious webpage that a user visits, causing the browser to invoke the vulnerable Track code and thereby spawning arbitrary sandboxed code.

Generated by OpenCVE AI on October 7, 2026 at 03:00 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Immediately upgrade Google Chrome to version 155.0.8059.39 or a later release that contains the fix.
  • If an update cannot be applied instantly, consider disabling JavaScript globally or applying content‑security‑policy restrictions to limit the execution of potentially malicious scripts.
  • Enable Chrome’s sandbox and Safe Browsing features and monitor the browser process for abnormal activity to detect any exploitation attempts.

Generated by OpenCVE AI on October 7, 2026 at 03:00 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-4833-1 chromium security update
Debian DSA Debian DSA DSA-6553-1 chromium security update
History

Wed, 14 Oct 2026 19:00:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Thu, 08 Oct 2026 12:15:00 +0000

Type Values Removed Values Added
Title Use-After-Free in Chrome's Track Component Enables Remote Code Execution within Sandbox chromium-browser: Use after free in Track
References
Metrics threat_severity

None

 threat_severity

Important

Wed, 07 Oct 2026 06:45:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome

Wed, 07 Oct 2026 03:15:00 +0000

Type Values Removed Values Added
Title Use-After-Free in Chrome's Track Component Enables Remote Code Execution within Sandbox

Tue, 06 Oct 2026 20:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 06 Oct 2026 19:00:00 +0000

Type Values Removed Values Added
Description Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Weaknesses CWE-416
References

Subscriptions

Google Chrome
cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published:

Updated: 2026-10-07T03:55:39.762Z

Reserved: 2026-10-06T16:36:06.687Z

Link: CVE-2026-106347

cve-icon Vulnrichment

Updated: 2026-10-06T19:41:32.299Z

cve-icon NVD

Status : Analyzed

Published: 2026-10-06T19:18:03.253

Modified: 2026-10-14T18:51:21.790

Link: CVE-2026-106347

cve-icon Redhat

Severity : Important

Publid Date: 2026-10-06T18:41:06Z

Links: CVE-2026-106347 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-10-07T06:30:13Z

Weaknesses