Vulnerability · Google Chrome
CVE-2026-119272
Out of bounds read in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVSS score (v3.1)4.3Medium
Fixed in 156.0.8078.79
Not on CISA KEV list
Am I affected?
Sign in and add the software you use to your watchlist: we check it against every new vulnerability.
Show me how to fix itTimeline
- First covered by RedTeamDaily
- Published by NVD
- Last updated by NVD
Affected products
| Product | Versions |
|---|---|
| Google Chrome | up to before 156.0.8078.79 |
Coverage
Sources: NVD and CISA known exploited vulnerabilities catalogue.