SWS Vulnerability Watch

Back to findings

CVE-2026-106347 in Google Chrome latest

Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Severity
High 8.8
Exploitation
0% chance of exploit
in the next 30 days
Fix
Update to 155.0.8059.39
Where
Workstation tool
How it matched
Recent CVE for this product – check your installed version
First seen
2026-11-05 01:13:58 UTC
Source
https://nvd.nist.gov/vuln/detail/CVE-2026-106347