Use-after-free Vulnerability in Google Chrome's FileSystem Component
CVE-2026-118347

Currently unrated

Key Information:

Vendor

Google

Status
Vendor
CVE Published:
27 October 2026

What is CVE-2026-118347?

A use-after-free vulnerability in the FileSystem component of Google Chrome prior to version 156.0.8078.73 permits attackers to exploit the flaw to execute arbitrary code within the browser's sandbox when users visit a specially crafted HTML page. This vulnerability poses risks by allowing unauthorized control over the affected system, emphasizing the need for users to upgrade to the latest version for enhanced security.

Affected Version(s)

Chrome 156.0.8078.73

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.