Tuesday 3 November
Global

Your region, kept on this device.

Vulnerability · Google Chrome

CVE-2026-119269

Use after free in Blink in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVSS score (v3.1)8.8High
Fixed in 156.0.8078.79
Not on CISA KEV list

Am I affected?

Sign in and add the software you use to your watchlist: we check it against every new vulnerability.

Show me how to fix it

Timeline

  1. First covered by RedTeamDaily
  2. Published by NVD
  3. Last updated by NVD

Affected products

ProductVersions
Google Chromeup to before 156.0.8078.79

Coverage

Sources: NVD and CISA known exploited vulnerabilities catalogue.