Tools AI-Found Vulnerability Register aifv-0084
Register entry
Chrome fixes Metrics use-after-free
- CVE
- CVE-2026-106233
- Project
- Google Chrome
- Component
- Metrics
- Finder
- Xinyang Ge (Anthropic), assisted by Claude
- Model
- Claude (version unstated)
- Autonomy
- Named human researcher assisted by Claude
- Evidence tier
- CNA credits the finder in its own advisory
- Assigner
- Chrome
- Severity
- High (Chrome vendor rating)
- Bounty
- Chrome Vulnerability Reward Program; amount unannounced
- Confidence
- CONFIRMED
What happened
Google’s 6 October Chrome release fixes use after free in metrics. The vendor rates it high and credits Xinyang Ge, assisted by Claude.
Credit as recorded: Reported by Xinyang Ge (Anthropic), assisted by Claude on 2026-09-24. The report to Google was dated 2026-09-24. Fixed releases are 155.0.8059.39/.40 on Windows and Mac and 155.0.8059.39 on Linux. The credit identifies Claude without a specific underlying model version. Date basis: vendor release note.
Sources
- Chrome stable release, 6 Octoberchromereleases.googleblog.com/2026/10/stable-channel-update-…
One record from the AI-Found Vulnerability Register, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 8 October 2026