Live › vulnerability › CVE-2026-118320
Go to dashboardGoogle Chrome versions before 156.0.8078.73 have a memory corruption bug in the V8 JavaScript engine. A remote attacker can use a crafted HTML page to potentially execute arbitrary code inside the browser sandbox.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 23:29 UTC. All times on this page are UTC.
Anyone running Google Chrome older than who browses untrusted web pages is exposed. Chromium-based browsers that pick up V8 fixes from upstream may also be affected, but the sources do not say which ones. Systems that never run a browser on untrusted content can skip it.
156.0.8078.73No product ranges from the sources yet.
chrome://settings/help156.0.8078.73156.0.8078.73 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
This page as .md · .json · in your agent: get_signal("CVE-2026-118320")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.