Chrome Patches 108 Vulnerabilities Including Crticial Flaws that Enable Code Execution Attacks
Google patched 108 vulnerabilities in Chrome 154, including critical memory-safety flaws that could enable remote code execution.
85
Vulnerability2 · 1 read
CVE-2026-95310
Use-after-free sandbox escape in Google Chrome AdFilter
- CVSS 3.1
- 9.6 critical
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
A use-after-free flaw (CWE-416) in the AdFilter component of Google Chrome, in versions prior to 154.0.8037.57, lets a remote attacker run arbitrary code outside the browser sandbox. The issue is triggered when a user opens a crafted HTML page. Chromium rates the bug Critical because successful exploitation breaks out of the sandbox rather than staying inside the renderer. Anyone still running an unpatched Chrome build older than 154.0.8037.57 is affected. No public proof of concept is known, the CVE is not on CISA’s Known Exploited Vulnerabilities list, and CVSS has not yet been scored, so exploitation in the wild is not currently known.
What to do: Update Google Chrome to version 154.0.8037.57 or later and fully restart the browser so the update is applied. Confirm the running build under chrome://settings/help, and apply the same Chromium-based vendor updates if your environment tracks this Chrome release.
| Product | Affected |
|---|---|
| Google Chrome | prior to 154.0.8037.57 |
Estimated exposure
masson the order of billions of Chrome users/installations (unpatched builds before 154.0.8037.57) — Google Chrome is the dominant desktop and mobile browser, with a publicly reported global user base on the order of billions; every installation still below 154.0.8037.57 is in scope until updated.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
Use after free in AdFilter in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
In the news
2 storiesChrome Update Fixes 108 Vulnerabilities Including Critical GPU, WebGL and ANGLE Flaws
Chrome 154 patches 108 vulnerabilities, including critical memory-safety flaws in ANGLE, GPU, and WebGL that could enable code execution.
60