Chromium: Five Memory Corruption and Use-After-Free Flaws Patched Together
Key findings • Three High and two Medium severity vulnerabilities disclosed in Chromium on October 15, 2026. • Vulnerabilities include use-after-free and memory corruption bugs in V8, DOM, Co…
Key findings
- Three High and two Medium severity vulnerabilities disclosed in Chromium on October 15, 2026.
- Vulnerabilities include use-after-free and memory corruption bugs in V8, DOM, Core, and SVG components.
- Exploitation could lead to arbitrary code execution within the sandbox or memory reading.
- All issues addressed in Google Chrome version 155.0.8059.84.
On October 15, 2026, Google released an update for its Chromium browser addressing a batch of five vulnerabilities, including three high-severity flaws. The disclosures, all published on the same day, highlight critical memory corruption and use-after-free bugs within core browser components. These vulnerabilities, if exploited, could allow remote attackers to execute arbitrary code within the browser's sandbox or read sensitive memory.
The batch includes two "use after free" vulnerabilities in the V8 JavaScript engine (CVE-2026-110921 and CVE-2026-110919), both rated High. These flaws could enable remote attackers to execute arbitrary code within the sandbox by tricking users into visiting a specially crafted HTML page.
Additionally, a "memory corruption" vulnerability in the DOM (Document Object Model) component, identified as CVE-2026-110913, also carries a High severity rating. This bug similarly allows for arbitrary code execution within the sandbox via a malicious HTML page.
Two other "memory corruption" vulnerabilities were disclosed: CVE-2026-110918 in the Core component and CVE-2026-110917 in the SVG (Scalable Vector Graphics) component. Both are rated Medium and could permit remote attackers to read memory through crafted HTML pages.
All five vulnerabilities, along with five others not detailed in this specific batch, were patched in Google Chrome version 155.0.8059.84. Users are strongly urged to update to this version or a later one to protect themselves from potential exploitation. The timely patching of these issues is crucial given the potential for remote code execution and memory access.
This coordinated disclosure underscores the ongoing efforts to secure the Chromium browser, a foundational technology for many web applications and services. Users should remain vigilant and ensure their browsers are consistently updated to mitigate emerging threats.