Improper Input Validation in Google Chrome Affects Multiple Versions

CVE-2026-118336

What is CVE-2026-118336?

A weakness within Google Chrome's Headless feature allows for improper input validation, permitting remote attackers to potentially execute arbitrary code. This vulnerability can be exploited by crafting a malicious HTML page that, when accessed, may circumvent sandbox protections, leading to unauthorized code execution within the browser environment. Users are advised to update their browsers to the latest version to mitigate risks associated with this vulnerability.

References