Use After Free Vulnerability in Google Chrome's Turbolev Component

CVE-2026-118350

What is CVE-2026-118350?

A vulnerability in the Turbolev component of Google Chrome prior to version 156.0.8078.73 could be exploited by remote attackers to execute arbitrary code. The issue arises due to use after free conditions, which can be triggered via specially crafted HTML pages, potentially allowing an attacker to bypass security measures and execute malicious commands within the browser's sandboxed environment.

References