CVE-2026-10905: Use after free in Network in Google Chrome prior to 149

Synopsis

A use-after-free vulnerability exists in the Network component of Google Chrome prior to version 149.0.7827.53. The flaw is reachable over the network and requires no authentication, but the attacker must first compromise the renderer process and persuade a victim to visit a crafted HTML page. Successful exploitation enables a sandbox escape, giving an attacker code execution outside Chrome's sandboxed renderer with the full impact of high confidentiality, integrity, and availability compromise. A patched-image rebuild at version 149.0.7827.53 is available on HarborGuard for environments running an affected version.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The attacker must be able to reach the victim's browser over the network by serving a crafted HTML page from a remote host.

• AuthenticationNot required

  No credentials or account access are needed; the attacker only needs to deliver the malicious page to the victim.

• Victim interactionRequired

  The victim must visit or be redirected to the attacker-controlled HTML page, making social engineering or phishing a necessary step.

• Attack complexityDetail

  Exploitation is rated high complexity because the attacker must first have compromised the renderer process before the use-after-free can be leveraged for a sandbox escape.

Blast Radius

• A successful sandbox escape lets the attacker execute arbitrary code outside Chrome's renderer sandbox, at the privilege level of the browser process.
• Confidentiality impact is high: the attacker reads memory, stored credentials, session tokens, and browsing data accessible to the browser process.
• Integrity impact is high: the attacker writes to files and system state accessible outside the sandbox, potentially planting malicious artifacts.
• Availability impact is high: the attacker crashes or forcibly terminates browser processes or dependent services on the host.