Arbitrary Code Execution Vulnerability in Google Chrome
CVE-2026-118332

Currently unrated

Key Information:

Vendor

Google

Status
Vendor
CVE Published:
27 October 2026

What is CVE-2026-118332?

A vulnerability exists in Google Chrome due to improper input validation during the compositing process. This flaw potentially enables a remote attacker to execute arbitrary code beyond the browser's sandbox by utilizing a specially crafted HTML page. Users of Google Chrome versions prior to 156.0.8078.73 are particularly at risk, highlighting the importance of timely updates to mitigate exposure to such threats.

Affected Version(s)

Chrome 156.0.8078.73

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.