Vulnerability
CVE-2026-118335
Improper input validation in Metrics in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVSS score (v3.1)8.8High
Not on CISA KEV list
Am I affected?
Sign in and add the software you use to your watchlist: we check it against every new vulnerability.
Timeline
- Published by NVD
- First covered by RedTeamDaily
- Last updated by NVD
Coverage
Sources: NVD and CISA known exploited vulnerabilities catalogue.