Vulnerability intelligence

CVE-2026-106347

Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

CVSS Score

8.8

High

EPSS — Exploit Probability

—

Awaiting FIRST.org data · checked 2026-10-07

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

Patch available

Vendor fix published

NVD entry Vendor patch PoC / advisory

1 article across 1 outlet · first covered Oct 7, 2026 · latest Oct 7, 2026

Coverage timeline

Google Chrome 155 fixes 247 flaws, including four critical bugs
securityonline.info · Oct 7, 2026

Related CVEs — Google

CVE-2026-106382 CVE-2026-106197 CVE-2026-106358 CVE-2026-102322 CVE-2026-106240 CVE-2026-103628 CVE-2026-103631 CVE-2026-103625