{"id":"CVE-2026-118345","kind":"vulnerability","aliases":["CVE-2026-118345"],"related":[],"title":"Chrome: PDFium use-after-free lets a crafted web page run code","description":"Use after free in PDFium in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)","summary":"A use-after-free bug in the PDFium PDF engine in Google Chrome versions before 156.0.8078.73 can be triggered by a crafted HTML page. A remote attacker could potentially execute arbitrary code inside the browser sandbox.","severity":"high","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["browser","chrome","desktop","package"],"not_affected_if":["already-updated"],"how_to_check":"- Open chrome://settings/help and note the installed Chrome version, or run `google-chrome --version` on Linux.\n- Compare the version against `156.0.8078.73`; anything lower is affected.","fix":"- Update Google Chrome to `156.0.8078.73` or later.\n- Relaunch the browser after the update so the fixed build is running.","status":"open","published_at":"2026-10-27T23:17:03+00:00","first_seen_at":"2026-10-27T23:29:43+00:00","triaged_at":"2026-10-27T23:31:38+00:00","updated_at":"2026-10-27T23:31:38+00:00","category":"package","confidence":0.7,"triage":{"at":"2026-10-27T23:31:38Z","model":"claude-haiku-5-5","output":{"fix":"- Update Google Chrome to `156.0.8078.73` or later.\n- Relaunch the browser after the update so the fixed build is running.","reach":"internet","title":"Chrome: PDFium use-after-free lets a crafted web page run code","impact":"high","summary":"A use-after-free bug in the PDFium PDF engine in Google Chrome versions before 156.0.8078.73 can be triggered by a crafted HTML page. A remote attacker could potentially execute arbitrary code inside the browser sandbox.","category":"package","nicknames":[],"who_cares":["chrome","desktop","browser"],"confidence":0.7,"needs_auth":"no","worst_case":"Attacker runs code inside the browser sandbox via a crafted page","analyst_note":"","how_to_check":"- Open chrome://settings/help and note the installed Chrome version, or run `google-chrome --version` on Linux.\n- Compare the version against `156.0.8078.73`; anything lower is affected.","needs_analyst":false,"not_affected_if":["already-updated"],"who_is_affected":"Anyone running Google Chrome older than 156.0.8078.73 who browses untrusted web pages. The flaw sits in the browser's PDF rendering component, so it matters for managed desktops and any machine where users open arbitrary sites. Servers and pipelines that never run Chrome can skip it, and so can users already on the fixed build.","user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.00059,"input_tokens":3295,"output_tokens":521,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-118345':16A,19A '-2026':15A,18A '156.0.8078.73':40B,71C 'allow':72C 'arbitrari':55B,79C 'attack':51B,75C 'browser':20B,59B 'bug':29B 'chrome':1A,21B,37B,68C 'chromium':89C 'code':13A,56B,80C 'could':52B 'craft':9A,46B,86C 'cve':14A,17A 'desktop':22B 'engin':34B 'execut':54B,78C 'free':6A,28B,63C 'googl':36B,67C 'high':92C 'html':47B,87C 'insid':57B,81C 'let':7A 'packag':23B 'page':11A,48B,88C 'pdf':33B 'pdfium':2A,32B,65C 'potenti':53B,77C 'prior':69C 'remot':50B,74C 'run':12A 'sandbox':60B,83C 'secur':90C 'sever':91C 'trigger':43B 'use':4A,26B,61C 'use-after-fre':3A,25B 'version':38B 'via':84C 'web':10A","nicknames":[],"mitigations":[],"who_affected":"Anyone running Google Chrome older than 156.0.8078.73 who browses untrusted web pages. The flaw sits in the browser's PDF rendering component, so it matters for managed desktops and any machine where users open arbitrary sites. Servers and pipelines that never run Chrome can skip it, and so can users already on the fixed build.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T23:17:03+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-118345","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118345","severity":null,"published_at":"2026-10-27T23:17:03+00:00","modified_at":"2026-10-27T23:17:03+00:00","first_seen_at":"2026-10-27T23:29:43+00:00","fetched_at":"2026-10-27T23:29:43+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}