Description
Use after free in Navigation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Published: 2026-10-06
Score: 9.6 Critical
EPSS: < 1% Very Low
KEV: No
Impact: Remote Code Execution
Action: Immediate Patch
AI Analysis

Impact

The vulnerability is a use‑after‑free fault in the Chrome Navigation module that permits a crafted HTML page to trigger the execution of arbitrary code outside of the browser sandbox. This flaw violates memory safety and compromises the confidentiality, integrity, and availability of the system that hosts the vulnerable browser instance.

Affected Systems

Google Chrome desktop versions older than 155.0.8059.39 are affected. Any machine running one of those releases is susceptible if a malicious web page is accessed through the browser.

Risk and Exploitability

Chromium labels the issue as Critical, and the CVSS score is 9.6. The vulnerability is not currently in the CISA KEV catalog. The attack vector is most likely a crafted web page that exploits the double use of freed memory, allowing an attacker to run code with elevated privileges beyond the browser’s sandbox.

Generated by OpenCVE AI on October 7, 2026 at 03:41 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Update Google Chrome to version 155.0.8059.39 or later from the official update channel.
  • Until the update is applied, block or sandbox sites that may deliver malicious HTML content, or disable JavaScript on untrusted pages using a browser extension or network filter.
  • Set enterprise policies or system settings to enforce automatic updates for Chrome or to block vulnerable versions until they are patched.

Generated by OpenCVE AI on October 7, 2026 at 03:41 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-4833-1 chromium security update
Debian DSA Debian DSA DSA-6553-1 chromium security update
History

Wed, 14 Oct 2026 19:00:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Thu, 08 Oct 2026 12:15:00 +0000

Type Values Removed Values Added
Title Use After Free in Navigation Allows Remote Code Execution Outside the Sandbox in Chrome chromium-browser: Use after free in Navigation
References
Metrics threat_severity

None

 threat_severity

Important

Wed, 07 Oct 2026 06:45:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome

Wed, 07 Oct 2026 04:00:00 +0000

Type Values Removed Values Added
Title Use After Free in Navigation Allows Remote Code Execution Outside the Sandbox in Chrome

Tue, 06 Oct 2026 20:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 9.6, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 06 Oct 2026 19:00:00 +0000

Type Values Removed Values Added
Description Use after free in Navigation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Weaknesses CWE-416
References

Subscriptions

Google Chrome
cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published:

Updated: 2026-10-07T03:55:34.986Z

Reserved: 2026-10-06T16:36:24.161Z

Link: CVE-2026-106358

cve-icon Vulnrichment

Updated: 2026-10-06T19:26:46.192Z

cve-icon NVD

Status : Analyzed

Published: 2026-10-06T19:18:04.740

Modified: 2026-10-14T18:46:03.907

Link: CVE-2026-106358

cve-icon Redhat

Severity : Important

Publid Date: 2026-10-06T18:41:05Z

Links: CVE-2026-106358 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-10-07T06:30:13Z

Weaknesses