Use After Free Vulnerability in Paint of Google Chrome
CVE-2026-118353

Currently unrated

Key Information:

Vendor

Google

Status
Vendor
CVE Published:
27 October 2026

What is CVE-2026-118353?

A use after free vulnerability in the Paint component of Google Chrome could permit a remote attacker to execute arbitrary code in the sandboxed environment using a specially crafted HTML page. This exploitation could potentially lead to breaching user security and privacy, highlighting the importance of timely updates to earlier versions of the browser.

Affected Version(s)

Chrome 156.0.8078.73

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.