Vulnerability intelligence

CVE-2026-110136

Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

CVSS Score

—

Unrated

EPSS — Exploit Probability

—

Awaiting FIRST.org data · checked 2026-10-14

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

Patch available

Vendor fix published

NVD entry Vendor patch PoC / advisory

1 article across 1 outlet · first covered Oct 14, 2026 · latest Oct 14, 2026

Coverage timeline

Google Fixes 37 Chrome Flaws, Including Seven Critical Bugs
securityonline.info · Oct 14, 2026

Related CVEs — Google

CVE-2026-110152 CVE-2026-110149 CVE-2026-110161 CVE-2026-110165 CVE-2026-110148 CVE-2026-58704KEV CVE-2026-106382 CVE-2026-106197