Google Chrome: Confused deputy in Google Lens enables sandbox escape
Summary
Google Chrome before 155.0.8059.39 contains a confused deputy flaw (CWE-441) in the Google Lens component. A remote attacker who has already compromised the renderer process can potentially execute arbitrary code outside the browser sandbox by luring a user to a crafted HTML page. Exploitation requires a separate renderer compromise and user interaction, so the flaw is a second stage in an attack chain.
Affected
- Google Chrome prior to 155.0.8059.39 (Windows, macOS, Linux)
- Chromium-based browsers and Linux distribution Chromium packages that include this fix are affected until updated
Fixed in
- Google Chrome 155.0.8059.39 or later (Windows and macOS: 155.0.8059.39/.40; Linux: 155.0.8059.39)
- Latest stable 155 point release recommended (Google's advisory was not verified directly)
- Debian: chromium 155.0.8059.39-1~deb12u1 (per OSV)
Workaround
- Updating to a fixed version is the fix; no workaround is needed where the patch is applied.
- Stopgap for systems that cannot be updated yet: disabling Google Lens via Chrome flags or extensions, as suggested by an aggregator (not verified against Google documentation).
Exploitation
- Not listed in CISA KEV; CISA ADP Vulnrichment does not mark it as known exploited.
- EPSS about 0.0037 (very low).
- No public proof of concept or exploit found; this does not rule out private exploitation.
- CISA SSVC: exploitation none, automatable no, technical impact total.
Our recommendation
- Confirm all Chrome and Edge installations run 155.0.8059.39 or later, ideally the latest 155 point release.
- Check Linux systems against their distribution's Chromium packages.
- Verify that automatic browser updates are enabled and enforced in managed fleets.
- Check the vendor advisory for Microsoft Edge build numbers.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- Chrome Releases: Stable Channel Update for Desktop chromereleases.googleblog.com
- Chromium issue tracker entry issues.chromium.org
- OSV: DEBIAN-CVE-2026-106228 osv.dev
- CISA ADP Vulnrichment summary (HOL Guard) hol.org
- SUSE CVE record via Vulners vulners.com
- Chainguard CVE record via Vulners vulners.com
- CIS advisory: multiple Google Chrome vulnerabilities www.cisecurity.org
- GHacks: Chrome 155 security fixes www.ghacks.net
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 1 Nov 2026, 14:11.
Original description (NVD)
Confused deputy in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.