Memory Corruption Vulnerability in Google Chrome's Paint Component

CVE-2026-118312

What is CVE-2026-118312?

A memory corruption issue in the Paint component of Google Chrome prior to version 156.0.8078.73 can be exploited by attackers. This vulnerability may allow an attacker to execute arbitrary code outside of the browser's sandbox environment through the use of a specially crafted HTML page, posing a significant risk to user security.

References