CVE-2026-110146 Google CVE debrief

Who should care

Google Chrome users, particularly those with sensitive information, should assess exposure and update to patched version. This includes users who handle sensitive information, IT administrators responsible for managing Chrome deployments, and security teams that need to verify and mitigate potential vulnerabilities in their environments.

Why it matters

CVE-2026-110146 information leak vulnerability in Google Chrome requires verification and potential update to patched version to prevent potential information disclosure.

• Potential information disclosure via crafted HTML page
• Requires verification of Chrome version and update to patched version
• Social engineering tactics may be used to exploit vulnerability

Technical summary

Information leak vulnerability in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. The vulnerability is caused by an issue in the Passwords component of Google Chrome, which can be exploited by a remote attacker using social engineering tactics. This could potentially lead to information disclosure if the vulnerability is exploited. Users of Google Chrome should verify their current version and update to 155.0.8059.79 or later to mitigate this vulnerability.

Defensive priority

Medium priority for Chrome users to verify and update to patched version.

Recommended defensive actions

• Verify Chrome version and update to 155.0.8059.79 or later
• Assess exposure to potential information leak
• Monitor for potential social engineering attacks
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

Information leak vulnerability in Google Chrome prior to 155.0.8059.79. Official CVE Program and NVD records indicate high severity. The CVE Program and NVD have documented this vulnerability, confirming its existence and impact. Evidence from these sources suggests that the vulnerability could lead to potential information disclosure if exploited. However, specific details about the exploitation are limited, and further verification is necessary to understand the full scope of the vulnerability.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.