Use after free in Geometry in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafte

Google Chrome2026-11-03 20:42 UTC1 min readRead in

AR EN

Summary

Use after free in Geometry in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Remediation

Inventory every Google Chrome deployment, including staging.
Upgrade Google Chrome to 157.0.8103.38.
Confirm the running version after the upgrade.

References

CVSS vector

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: Required
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected versions

Version	Fixed in
157.0.8103.38 – <157.0.8103.38	157.0.8103.38

Weakness

CWE-416

Timeline

2026-11-03Publicly disclosed

Sources

CVE