Use-after-free in Chrome Navigation allows sandbox code execution

Use-after-free in Google Chrome's Navigation component allows remote code execution inside the sandbox via a crafted HTML page. CVSS 9.6. Patched in Chrome 155.

cat cve-2026-106358.json

Vendor: Google
Product: Chrome (Navigation component, prior to 155.0.8059.39)
CVSS: 9.6
EPSS (exploit probability): N/A
Status: patched
Published: October 7, 2026
Source: https://nvd.nist.gov/vuln/detail/CVE-2026-106358

CVE-2026-106358 is a use-after-free in Google Chrome’s Navigation component. An attacker can trigger it via a crafted HTML page to achieve code execution inside the renderer sandbox.

Reported by Xinyang Ge. Patched in Chrome 155.0.8059.39 (all platforms), released October 7, 2026. No exploitation in the wild reported.

Related coverage

~/articles/2026-10-07-chrome-155-247-vulnerabilities-four-critical

browser

Chrome 155 Patches 4 Critical UAF Bugs, 247 Total

Google shipped Chrome 155 with 247 fixes, including four critical use-after-free bugs in core browser components. No active exploitation reported yet.

Oct 7read →