Improper Input Validation in WebRTC of Google Chrome

CVE-2026-118328

What is CVE-2026-118328?

A security flaw in the WebRTC component of Google Chrome prior to version 156.0.8078.73 can allow remote attackers to manipulate input validation. This vulnerability enables an attacker to create a specially crafted HTML page that, when opened by a victim, could lead to potential arbitrary code execution within the browser's sandbox environment. The issue highlights the importance of robust input checks to mitigate such security risks.

References