Use After Free Vulnerability in Google Chrome
CVE-2026-118346

Currently unrated

Key Information:

Vendor

Google

Status
Vendor
CVE Published:
27 October 2026

What is CVE-2026-118346?

An identified vulnerability exists in Google Chrome due to a use after free error in the compositing module. This flaw allows a remote attacker to potentially execute arbitrary code within the browser's sandbox environment by crafting a malicious HTML page. Users of Google Chrome versions earlier than 156.0.8078.73 are particularly at risk and should upgrade promptly to ensure protection against this type of exploit.

Affected Version(s)

Chrome 156.0.8078.73

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.