CVE-2026-110918

MEDIUM CVSS 3.1: 4.3 EPSS 0.18%
Updated Oct 16, 2026
Google
Parameter Value
CVSS 4.3 (MEDIUM)
Affected Versions before 155.0.8059.84
Type CWE-119 (Buffer Overflow)
Vendor Google
Public PoC No

Memory corruption in Core in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read memory via a crafted HTML page. (Chromium security severity: High)

Attack Parameters

Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Privileges Required
None
No privileges needed
User Interaction
Required
User action required

Impact Assessment

Confidentiality
Low
Partial data leak
Integrity
None
No data modification
Availability
None
No disruption

CVSS Vector v3.1

Weakness Type (CWE)

Vulnerable Products

google:chrome