Signal is active with 4 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Use after free in Navigation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Chrome 155 patches 4 critical use-after-free flaws that can enable remote code execution via a crafted HTML page. CVE-2026-106197 and CVE-2026-106358 are both CVSS 9.6 and allow RCE outside Chrome's sandbox. No public exploits found. #Chrome #CyberSecurity https://t.co/EqDSnDecMC
The four Chrome vulnerabilities: CVE-2026-106197 | CVSS 9.6 | RCE outside sandbox CVE-2026-106358 | CVSS 9.6 | RCE outside sandbox CVE-2026-106382 | CVSS 9.6 | RCE inside sandbox CVE-2026-106347 | CVSS 8.8 | RCE inside sandbox
#Google has released security update for #Chrome to address multiple #Critical vulnerabilities. #CVE-2026-106382 #CVE-2026-106197 #CVE-2026-106358 #CVE-2026-106347 https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html
ExploitGrid records: CVE-2026-106197 https://exploitgrid.net/vulnerabilities/CVE-2026-106197 CVE-2026-106358 https://exploitgrid.net/vulnerabilities/CVE-2026-106358 CVE-2026-106382 https://exploitgrid.net/vulnerabilities/CVE-2026-106382 CVE-2026-106347 https://exploitgrid.net/vulnerabilities/CVE-2026-106347