CVE-2026-118348Not scored
Google Chrome vulnerability
Google · Chrome
Not in CISA KEVVendor fix available
No EPSS score yet. The score appears once FIRST publishes it.
Not scored yet. NVD has not published a CVSS score.
DescriptionNVD
Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 28 Oct.
- Google Chrome update fixes 52 flaws, including four critical bugsSecurityOnline · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.