Live › vulnerability › CVE-2026-118329
Go to dashboardGoogle Chrome on macOS before 156.0.8078.73 has an improper input validation bug in the ANGLE graphics layer. A remote attacker who gets a user to open a crafted HTML page can potentially execute arbitrary code inside the browser sandbox.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 23:29 UTC. All times on this page are UTC.
Any macOS machine running Google Chrome older than is exposed when a user visits a malicious page. Managed fleets and developer workstations that browse untrusted sites are the main concern. Systems on other operating systems or with updated Chrome can skip it.
156.0.8078.73No product ranges from the sources yet.
google-chrome --version on a managed machine156.0.8078.73156.0.8078.73 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Improper input validation in ANGLE in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
This page as .md · .json · in your agent: get_signal("CVE-2026-118329")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.