Is CVE-2026-110150 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-110150 being exploited in the wild.

How severe is CVE-2026-110150?

Medium severity, with a CVSS score of 5.5, published 13 October 2026.

Which products and versions are affected?

Google Chrome prior to 155.0.8059.79 on Windows.

Is there a fix for CVE-2026-110150?

Yes: fixed in Chrome 155.0.8059.79 and later on Windows. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-110150 attacked?

It is attacked with local access, in a web application.

Am I affected by CVE-2026-110150?

Check whether you run Google Chrome or Microsoft Windows at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-110150: Google Chrome privilege elevation in Installer on Windows

CVE-2026-110150 · Severity: medium · CVSS 5.5 · Published 2026-10-13

Google Chrome on Windows has a privilege elevation vulnerability in its installer component that allows a local attacker to obtain sensitive information. An attacker with local access to a Windows system can exploit this flaw to escalate privileges and read sensitive data that should normally be restricted to higher-privilege users.

Technologies: Google Chrome, Microsoft Windows. Vendors: Google, Microsoft.

Quick answers

Is CVE-2026-110150 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-110150 being exploited in the wild.
How severe is CVE-2026-110150?: Medium severity, with a CVSS score of 5.5, published 13 October 2026.
Which products and versions are affected?: Google Chrome prior to 155.0.8059.79 on Windows.
Is there a fix for CVE-2026-110150?: Yes: fixed in Chrome 155.0.8059.79 and later on Windows. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-110150 attacked?: It is attacked with local access, in a web application.
Am I affected by CVE-2026-110150?: Check whether you run Google Chrome or Microsoft Windows at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: Chrome 155.0.8059.79 and later on Windows

Technical details

The vulnerability is a privilege elevation issue in the Chrome installer on Windows, allowing local attackers to gain elevated access via a local program. It requires local code execution as a precondition but enables an attacker to bypass privilege boundaries and access sensitive information. The fix is available in Chrome 155.0.8059.79 and later on Windows.

Affected products

Google Chrome prior to 155.0.8059.79 on Windows

Timeline

2026-10-13: disclosed
2026-10-13: patched

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.