Buffer overflow in Google Chromium - CVE-2026-110914
Published: October 16, 2026
Vulnerability identifier: #VU156005
CSH Severity: High
CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-110914
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to potentially execute arbitrary code or cause a denial of service.
The vulnerability exists due to memory corruption in the Workers component of Google Chrome when processing web content. A remote attacker can supply specially crafted content to potentially corrupt memory, execute arbitrary code, or crash the affected process.
Affected software
Google Chromium
Google Chrome
Google Chrome
How to mitigate CVE-2026-110914
Install security update from vendor's website.
Google Chromium - update to 155.0.8059.84
Google Chrome - update to 155.0.8059.84
Google Chrome - update to 155.0.8059.84