CVE-2026-110171
Quick assessment
Affected
Google Chrome
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 Google Chrome 155.0.8059.79 版本之前的 Media 组件中存在一个释放后使用（use-after-free）漏洞。远程攻击者可通过构造的 HTML 页面，在沙箱环境中执行任意代码。（Chromium 安全严重性评级：高）
Possible ATT&CK Techniques 1 AI
T1203 · Exploitation for Client Execution
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-110171
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
释放后使用
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-110171
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-110171
请登录查看更多情报信息。
Security Blog Posts for CVE-2026-110171 (1)
Vendor Pages for CVE-2026-110171 (1)
Same Patch Batch · Google · 2026-10-13 · 37 CVEs total
| CVE-2026-110148 | Chrome<155.0.8059.79 SVG Use-After-Free致代码执行 | |
| CVE-2026-110140 | Chrome <155.0.8059.79 V8类型混淆漏洞 | |
| CVE-2026-110137 | Chrome <155.0.8059.79 WebRTC使用释放后漏洞 | |
| CVE-2026-110145 | Google Chrome 155.0.8059.79 前 释放后使用漏洞 | |
| CVE-2026-110150 | Chrome <155.0.8059.79 Windows安装程序提权漏洞 | |
| CVE-2026-110160 | Chrome <155.0.8059.79 缺少授权漏洞 | |
| CVE-2026-110156 | Chrome <155.0.8059.79 扩展扩展错误引用解析漏洞 | |
| CVE-2026-110146 | Chrome<155.0.8059.79信息泄露漏洞 | |
| CVE-2026-110143 | Chrome<155.0.8059.79未初始化变量越权读内存 | |
| CVE-2026-110158 | Chrome小于155.0.8059.79释放后使用漏洞 | |
| CVE-2026-110151 | Chrome<155.0.8059.79 媒体模块Use-After-Free漏洞 | |
| CVE-2026-110162 | Chrome <155.0.8059.79 沙盒内远程代码执行漏洞 | |
| CVE-2026-110170 | Chrome < 155.0.8059.79绑定使用-after-free远程内存读取 | |
| CVE-2026-110136 | Chrome <155.0.8059.79 PDF UAF漏洞致远程代码执行 | |
| CVE-2026-110165 | Android Chrome <155.0.8059.79 内存使用后释放漏洞 | |
| CVE-2026-110161 | Chrome<155.0.8059.79 网络Use-After-Free致代码执行 | |
| CVE-2026-110149 | Chrome<155.0.8059.79远程代码执行漏洞 | |
| CVE-2026-110152 | Android Chrome 155.0.8059.79 前版本 ANGLE 缓冲区溢出漏洞 | |
| CVE-2026-110172 | Chrome <155.0.8059.79 媒体模块UAF漏洞致远程代码执行 | |
| CVE-2026-110147 | Chrome < 155.0.8059.79 PDF释放后使用漏洞 |
Showing top 20 of 37 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2026-110171
No comments yet