Improper Input Validation in Google Chrome by Google
CVE-2026-118354

Currently unrated

Key Information:

Vendor

Google

Status
Vendor
CVE Published:
27 October 2026

What is CVE-2026-118354?

A vulnerability in Google Chrome allows remote attackers to exploit improper input validation in Skia, potentially leading to arbitrary code execution within the browser's sandbox environment. This type of vulnerability arises when user-inputted data is not properly verified, allowing attackers to craft malicious HTML pages that can trigger the flaw. Users are advised to upgrade their Chrome browser to ensure protection against such exploits.

Affected Version(s)

Chrome 156.0.8078.73

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.