high severity ยท published 2026-10-30
A remote attacker who has already taken over a browser renderer process can run their own code on the computer outside Chrome's sandbox through crafted network traffic, using an incorrect reference resolution flaw in the Quota component of Chrome. Chromium rates it High.
Fixed in: 156.0.8078.79
CVE: CVE-2026-119265
Source: NVD
Fixlane has a reviewed fix procedure for this incident: a read-only check first, then the fix. Ask the Telegram bot, or connect an AI agent to the Fixlane MCP server and call get_fix_prompt with incident id 642 and your operating system.