Vulnerability · Google Chrome
CVE-2026-118317
Memory corruption in HTML in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVSS score (v3.1)8.8High
Fixed in 156.0.8078.73
Not on CISA KEV list
Am I affected?
Sign in and add the software you use to your watchlist: we check it against every new vulnerability.
Timeline
- Published by NVD
- First covered by RedTeamDaily
- Last updated by NVD
Affected products
| Product | Versions |
|---|---|
| Google Chrome | up to before 156.0.8078.73 |
Coverage
Sources: NVD and CISA known exploited vulnerabilities catalogue.