Loading vulnerability…
Local Code Execution Outside the Sandbox in Google Chrome Updater
CVE-2026-110159 is an incorrect-authorization vulnerability in the Updater component of Google Chrome before version 155.0.8059.79. A local attacker can exploit the authorization failure through a local program to execute arbitrary code outside the Chrome sandbox. Chromium rates the vulnerability as High severity. The affected function, authorization-check details, and resulting execution privilege level are not specified.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation permits arbitrary code execution outside the Chrome sandbox, bypassing its confinement protections. The resulting operating-system privilege level is unspecified; administrator or SYSTEM-level execution is not established.
If you can’t patch tonight, do this now.
No vulnerability-specific workaround is specified. Pending patching, restrict execution of untrusted local programs and limit untrusted users' access to affected systems. These measures reduce exposure but do not replace the security update.
Patch, then assume compromise.
Upgrade Google Chrome to version 155.0.8059.79 or a later supported fixed release and relaunch the browser. For distribution-managed Chromium, install the applicable vendor security update; Debian stable (trixie) provides a fix in version 155.0.8059.79-1~deb13u1 or later. For Microsoft Edge, install the latest supported release identified by Microsoft as no longer vulnerable.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
23 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.