Watch card · compiled automatically, not analysed
CVE-2026-110916
Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code outside the…
AI summaryGoogle Chrome before 155.0.8059.84 may let a crafted web page run code outside the sandbox; update Chrome.
Our research pipeline compiles this page from public data. It contains no human judgement from PlainCVE; rely on the original advisories for facts.
Our status
Candidate — Not queued for research yet. Below is public data only.
Key numbers
- CVSS
- 9.6 v3.1
- CISA KEV
- Not listed
- EPSS
- 0.34%
- Momentum
- —
Timeline
- 2026-10-15DisclosedNVD
How much time similar vulnerabilities gave
Category: Browsers. Of 15 similar vulnerabilities disclosed since 2025 and added to KEV, the median time from disclosure to KEV was 0 days; 100% were added within 7 days.
This one: not in KEV so far (that does not mean it is not exploited).
Counts only vulnerabilities CISA has confirmed as exploited; disclosure is the NVD publication date, which can differ from the vendor advisory.
Primary sources
Watch cards update with This week every 3 hours. Once we write this up, this URL will point to the write-up.