{"id":"CVE-2026-118348","kind":"vulnerability","aliases":["CVE-2026-118348"],"related":[],"title":"Google Chrome: Skia input validation flaw lets crafted page run code","description":"Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)","summary":"Improper input validation in Skia, Chrome's graphics library, lets a remote attacker execute arbitrary code inside the browser sandbox via a crafted HTML page. The sources rate it Critical in Chromium's own scale.","severity":"critical","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["browsers","chrome","chromium","desktop","other"],"not_affected_if":["patched-version"],"how_to_check":"- Check the installed Chrome version in the browser's About page or with `google-chrome --version`\n- Confirm whether any Chromium-based build in use is older than `156.0.8078.73`","fix":"- Update Google Chrome to `156.0.8078.73` or later\n- Update other Chromium-based browsers and embedded Chromium builds once their vendors ship the fix","status":"open","published_at":"2026-10-27T23:17:03+00:00","first_seen_at":"2026-10-27T23:29:44+00:00","triaged_at":"2026-10-27T23:31:35+00:00","updated_at":"2026-10-27T23:31:35+00:00","category":"other","confidence":0.7,"triage":{"at":"2026-10-27T23:31:35Z","model":"claude-haiku-5-5","output":{"fix":"- Update Google Chrome to `156.0.8078.73` or later\n- Update other Chromium-based browsers and embedded Chromium builds once their vendors ship the fix","reach":"internet","title":"Google Chrome: Skia input validation flaw lets crafted page run code","impact":"high","summary":"Improper input validation in Skia, Chrome's graphics library, lets a remote attacker execute arbitrary code inside the browser sandbox via a crafted HTML page. The sources rate it Critical in Chromium's own scale.","category":"other","nicknames":[],"who_cares":["chrome","chromium","browsers","desktop"],"confidence":0.7,"needs_auth":"no","worst_case":"Attacker runs code inside the browser sandbox after a victim opens a page","analyst_note":"","how_to_check":"- Check the installed Chrome version in the browser's About page or with `google-chrome --version`\n- Confirm whether any Chromium-based build in use is older than `156.0.8078.73`","needs_analyst":false,"not_affected_if":["patched-version"],"who_is_affected":"Anyone running Google Chrome or another Chromium-based browser built before 156.0.8078.73, since the flaw is in the rendering library that every page uses. Teams that ship Chromium inside their own apps or kiosks should check their embedded version as well. Users on a patched build can skip it.","user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"critical"},"cost_usd":0.000586,"input_tokens":3297,"output_tokens":512,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-118348':14A,17A '-2026':13A,16A '156.0.8078.73':67C 'allow':68C 'arbitrari':36B,75C 'attack':34B,71C 'browser':18B,40B 'chrome':2A,19B,27B,64C 'chromium':20B,53B,85C 'code':11A,37B,76C 'craft':8A,44B,82C 'critic':51B,88C 'cve':12A,15A 'desktop':21B 'execut':35B,74C 'flaw':6A 'googl':1A,63C 'graphic':29B 'html':45B,83C 'improp':22B,57C 'input':4A,23B,58C 'insid':38B,77C 'let':7A,31B 'librari':30B 'page':9A,46B,84C 'potenti':73C 'prior':65C 'rate':49B 'remot':33B,70C 'run':10A 'sandbox':41B,79C 'scale':56B 'secur':86C 'sever':87C 'skia':3A,26B,61C 'sourc':48B 'valid':5A,24B,59C 'via':42B,80C","nicknames":[],"mitigations":[],"who_affected":"Anyone running Google Chrome or another Chromium-based browser built before 156.0.8078.73, since the flaw is in the rendering library that every page uses. Teams that ship Chromium inside their own apps or kiosks should check their embedded version as well. Users on a patched build can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T23:17:03+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-118348","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118348","severity":null,"published_at":"2026-10-27T23:17:03+00:00","modified_at":"2026-10-27T23:17:03+00:00","first_seen_at":"2026-10-27T23:29:44+00:00","fetched_at":"2026-10-27T23:29:44+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}