Use After Free Vulnerability in Google Chrome Paint Component

CVE-2026-118307

What is CVE-2026-118307?

A vulnerability in the Paint component of Google Chrome allowed remote attackers to exploit a condition known as 'use after free'. This issue could enable attackers to execute arbitrary code within the browser's sandbox by utilizing a specially crafted HTML page. Users running versions of Google Chrome prior to 156.0.8078.73 are particularly at risk. Regular updates and security patches are recommended to mitigate exposure to such threats.

References