{"id":"CVE-2026-118342","kind":"vulnerability","aliases":["CVE-2026-118342"],"related":[],"title":"Google Chrome: out-of-bounds write in Editing lets a web page run code","description":"Out of bounds write in Editing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)","summary":"Chrome versions before 156.0.8078.73 have an out-of-bounds write in the Editing component. A remote attacker who gets a user to open a crafted HTML page could execute arbitrary code outside the browser sandbox.","severity":"high","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["browsers","chrome","endpoints","other"],"not_affected_if":["already-on-156.0.8078.73-or-later"],"how_to_check":"- Open Chrome and check the version under Settings > About Chrome, or run `google-chrome --version` on Linux.\n- Check the version reported by managed Chrome installs against `156.0.8078.73`.","fix":"- Update Google Chrome to `156.0.8078.73` or later.\n- Relaunch the browser after the update to load the fixed build.","status":"open","published_at":"2026-10-27T23:17:03+00:00","first_seen_at":"2026-10-27T23:29:43+00:00","triaged_at":"2026-10-27T23:31:41+00:00","updated_at":"2026-10-27T23:31:41+00:00","category":"other","confidence":0.7,"triage":{"at":"2026-10-27T23:31:41Z","model":"claude-haiku-5-5","output":{"fix":"- Update Google Chrome to `156.0.8078.73` or later.\n- Relaunch the browser after the update to load the fixed build.","reach":"internet","title":"Google Chrome: out-of-bounds write in Editing lets a web page run code","impact":"high","summary":"Chrome versions before 156.0.8078.73 have an out-of-bounds write in the Editing component. A remote attacker who gets a user to open a crafted HTML page could execute arbitrary code outside the browser sandbox.","category":"other","nicknames":[],"who_cares":["chrome","browsers","endpoints"],"confidence":0.7,"needs_auth":"no","worst_case":"Attacker runs code outside the browser sandbox after a user visits a page.","analyst_note":"Confirm the fix version and whether Google has exploitation data; check the Chrome release notes for this build.","how_to_check":"- Open Chrome and check the version under Settings > About Chrome, or run `google-chrome --version` on Linux.\n- Check the version reported by managed Chrome installs against `156.0.8078.73`.","needs_analyst":true,"not_affected_if":["already-on-156.0.8078.73-or-later"],"who_is_affected":"Any machine running Google Chrome before 156.0.8078.73 is exposed, since the flaw is triggered by visiting a crafted HTML page. Teams that manage browsers centrally should confirm their fleet has been updated. Systems where Chrome is not installed, or is fully on a patched build, can skip it.","user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000608,"input_tokens":3297,"output_tokens":557,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-118342':18A,21A '-2026':17A,20A '156.0.8078.73':28B,72C 'allow':73C 'arbitrari':55B,80C 'attack':42B,76C 'bound':6A,34B,63C 'browser':22B,59B 'chrome':2A,23B,25B,69C 'chromium':90C 'code':15A,56B,81C 'compon':39B 'could':53B 'craft':50B,87C 'cve':16A,19A 'edit':9A,38B,66C 'endpoint':24B 'execut':54B,79C 'get':44B 'googl':1A,68C 'high':93C 'html':51B,88C 'let':10A 'open':48B 'out-of-bound':3A,31B 'outsid':57B,82C 'page':13A,52B,89C 'potenti':78C 'prior':70C 'remot':41B,75C 'run':14A 'sandbox':60B,84C 'secur':91C 'sever':92C 'user':46B 'version':26B 'via':85C 'web':12A 'write':7A,35B,64C","nicknames":[],"mitigations":[],"who_affected":"Any machine running Google Chrome before 156.0.8078.73 is exposed, since the flaw is triggered by visiting a crafted HTML page. Teams that manage browsers centrally should confirm their fleet has been updated. Systems where Chrome is not installed, or is fully on a patched build, can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T23:17:03+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-118342","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118342","severity":null,"published_at":"2026-10-27T23:17:03+00:00","modified_at":"2026-10-27T23:17:03+00:00","first_seen_at":"2026-10-27T23:29:43+00:00","fetched_at":"2026-10-27T23:29:43+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}