CVE-2026-110156 Google CVE debrief

Who should care

Defenders responsible for managing Google Chrome installations, particularly in environments where extensions are used, should assess exposure to this vulnerability and prioritize updating Chrome to the latest version.

Why it matters

CVE-2026-110156 is a high-severity vulnerability in Google Chrome that allows remote attackers to execute arbitrary code outside the sandbox. Defenders should assess exposure, prioritize patching, and restrict unknown or untrusted extensions.

• Remote code execution outside the sandbox
• Potential for privilege escalation
• Increased risk of system compromise
• Need for urgent patching and verification

Technical summary

The vulnerability is caused by incorrect reference resolution in Extensions in Google Chrome on Mac prior to version 155.0.8059.79. This allows a remote attacker who has compromised the renderer process to execute arbitrary code outside the sandbox via a crafted Chrome extension. The vulnerability has a high severity and defenders should assess exposure and prioritize patching. The CVE record and source item provide details on the vulnerability in Google Chrome on Mac prior to version 155.0.8059.79. Defenders should review Chrome extension usage and restrict unknown or untrusted extensions.

Defensive priority

High

Recommended defensive actions

• Assess exposure of Chrome installations to this vulnerability
• Verify Chrome version is 155.0.8059.79 or later
• Update Chrome to the latest version
• Review Chrome extension usage and restrict unknown or untrusted extensions
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed

Evidence notes

The CVE record and source item provide details on the vulnerability in Google Chrome on Mac prior to version 155.0.8059.79. The vulnerability allows a remote attacker who has compromised the renderer process to execute arbitrary code outside the sandbox via a crafted Chrome extension.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.