Live › vulnerability › CVE-2026-118319
Go to dashboardA memory corruption bug in Skia, the graphics library inside Google Chrome, lets a remote attacker read memory inside the browser sandbox when a victim opens a crafted HTML page. Chromium rates it High severity.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 23:29 UTC. All times on this page are UTC.
Any machine running Google Chrome before is exposed when a user visits an attacker-controlled page. Managed fleets and shared workstations are the main concern because the browser update may lag. Teams that only use Chrome on up-to-date devices with auto-update enabled can skip the manual step.
156.0.8078.73No product ranges from the sources yet.
google-chrome --version on Linux156.0.8078.73156.0.8078.73 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)
This page as .md · .json · in your agent: get_signal("CVE-2026-118319")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.