Live › vulnerability › CVE-2026-118343
Go to dashboardGoogle Chrome before 156.0.8078.73 mishandles input in its ReadingList feature, so a crafted HTML page can potentially execute arbitrary code inside the browser sandbox. Chromium rates it High severity.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 23:29 UTC. All times on this page are UTC.
Any machine running Google Chrome older than 156.0.8078.73 is exposed when a user visits a crafted web page. Managed fleets and personal browsers both need the update; the sources do not say whether the ReadingList feature must be enabled for the flaw to be reachable.
No product ranges from the sources yet.
google-chrome --version on Linux156.0.8078.73; anything older is affected156.0.8078.73 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Improper input validation in ReadingList in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
This page as .md · .json · in your agent: get_signal("CVE-2026-118343")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.