Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
5302 articles · 252853 vulns · 36/41 feeds (7d)
← Back to list
9.6
CVE-2026-106298PATCHED
google · chrome

CVE-2026-106298: Use after free in Chrome Tabs in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to potentially

Description

Use after free in Chrome Tabs in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Affected Products

VendorProductVersions
googlechrome155.0.8059.39

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
applemacoscve_cpe95%
googlechromecert_advisory90%

References

  • https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html
  • https://issues.chromium.org/issues/555932520

Related News (4 articles)

Tier B
CERT-FR1d ago
Multiples vulnérabilités dans Microsoft Edge (27 octobre 2026)
→ No new info (linked only)
Tier B
BSI Advisories20d ago
[NEU] [hoch] Google Chrome: Mehrere Schwachstellen
→ No new info (linked only)
Tier B
CERT-FR21d ago
Multiples vulnérabilités dans Google Chrome (07 octobre 2026)
→ No new info (linked only)
Tier C
VulDB21d ago
CVE-2026-106298 | Google Chrome up to 154.0.8037.97 Chrome Tabs use after free
→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.19.6 CRITICAL
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CISA KEV❌ No
Actively exploited❌ No
Patch available
155.0.8059.39
CWECWE-416
PublishedOct 6, 2026
Last enriched21d ago
Trending Score46
Source articles4
Independent3
Info Completeness4/14
Missing: vendor, product, versions, cvss, epss, kev, exploit, patch, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

NONECVE-2026-111497
Out-of-Bounds Write in Google Brotli Decoder
Trending: 79
CRITICALCVE-2026-102331
CVE-2026-102331: Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to potentially
Trending: 50
CRITICALCVE-2026-106414
CVE-2026-106414: Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveragi
Trending: 47
CRITICALCVE-2026-102309
CVE-2026-102309: Use after free in FullScreen in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code
Trending: 47
CRITICALCVE-2026-102304
CVE-2026-102304: Use after free in Passwords in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code
Trending: 47

Pin to Dashboard

Verification

State: verified
Confidence: 100%

Vulnerability Timeline

CVE Published
Oct 6, 2026
Discovered by ZDM
Oct 6, 2026
Patch Available
Oct 7, 2026