Improper Input Validation in Google Chrome May Lead to Code Execution
CVE-2026-118343

Currently unrated

Key Information:

Vendor

Google

Status
Vendor
CVE Published:
27 October 2026

What is CVE-2026-118343?

An improper input validation issue in the ReadingList feature of Google Chrome prior to version 156.0.8078.73 may enable remote attackers to potentially execute arbitrary code within the sandbox environment by leveraging a specially crafted HTML page. This vulnerability underscores the importance of keeping browsers up to date and implementing robust security measures to mitigate such risks.

Affected Version(s)

Chrome 156.0.8078.73

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.