Sign inGet the app
Vulnerability · Google Chrome

CVE-2026-118309

Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVSS score (v3.1)9.6Critical
Fixed in 156.0.8078.73
Not on CISA KEV list

Am I affected?

Sign in and add the software you use to your watchlist: we check it against every new vulnerability.

Timeline

  1. Published by NVD
  2. First covered by RedTeamDaily
  3. Last updated by NVD

Affected products

ProductVersions
Google Chromeup to before 156.0.8078.73

Coverage

Sources: NVD and CISA known exploited vulnerabilities catalogue.