Live › vulnerability › CVE-2026-118318
Go to dashboardGoogle Chrome's V8 JavaScript engine before 156.0.8078.73 has an improper access control flaw. A remote attacker who lures a user to a crafted HTML page can read memory from the browser process.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 23:29 UTC. All times on this page are UTC.
Any device running Google Chrome before 156.0.8078.73 is exposed, because the trigger is a web page the user visits. Chromium-based browsers that pull in V8 from Chromium may also need their own updates. Systems that do not run Chrome or a Chromium-based browser can skip it.
No product ranges from the sources yet.
156.0.8078.73156.0.8078.73 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Improper access control in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to read memory via a crafted HTML page. (Chromium security severity: High)
This page as .md · .json · in your agent: get_signal("CVE-2026-118318")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.