Improper Input Validation in Google Chrome for Android Devices
CVE-2026-118309

Currently unrated

Key Information:

Vendor: Google
Status: Chrome
Vendor: CVE Published:; 27 October 2026

What is CVE-2026-118309?

A vulnerability in the user interface of Google Chrome for Android devices allows remote attackers to execute arbitrary code outside the browser's sandbox environment. This flaw is due to improper input validation, making it possible for a crafted HTML page to trigger this behavior. Users are encouraged to update to version 156.0.8078.73 or later to mitigate potential risks.

Affected Version(s)

Chrome 156.0.8078.73

References

https://chromereleases.googleblog.com/2026/10/stable-chan...

https://issues.chromium.org/issues/576133777

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 27, 2026
Vulnerability Reserved
Oct 27, 2026

CVE-2026-118309 Data

JSON