{"id":"CVE-2026-118351","kind":"vulnerability","aliases":["CVE-2026-118351"],"related":[],"title":"Chrome: Skia memory corruption lets a crafted web page run code","description":"Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)","summary":"A memory corruption bug in Skia, the graphics library inside Google Chrome before 156.0.8078.73, can be triggered by a crafted HTML page. A remote attacker can execute arbitrary code inside the browser sandbox.","severity":"high","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["browsers","chrome","endpoints","linux","macos","runtime","windows"],"not_affected_if":["chrome-156-or-later"],"how_to_check":"- Open chrome://version and compare the version to `156.0.8078.73`\n- On managed machines, check the installed Chrome version with your endpoint tool\n- Note: Chromium and other Chromium-based browsers may ship Skia separately, so check their versions too","fix":"- Update Google Chrome to `156.0.8078.73` or later\n- Relaunch the browser after the update so the new version is running","status":"open","published_at":"2026-10-27T23:17:04+00:00","first_seen_at":"2026-10-27T23:29:44+00:00","triaged_at":"2026-10-27T23:31:31+00:00","updated_at":"2026-10-27T23:31:31+00:00","category":"runtime","confidence":0.7,"triage":{"at":"2026-10-27T23:31:31Z","model":"claude-haiku-5-5","output":{"fix":"- Update Google Chrome to `156.0.8078.73` or later\n- Relaunch the browser after the update so the new version is running","reach":"internet","title":"Chrome: Skia memory corruption lets a crafted web page run code","impact":"medium","summary":"A memory corruption bug in Skia, the graphics library inside Google Chrome before 156.0.8078.73, can be triggered by a crafted HTML page. A remote attacker can execute arbitrary code inside the browser sandbox.","category":"runtime","nicknames":[],"who_cares":["chrome","browsers","endpoints","windows","macos","linux"],"confidence":0.7,"needs_auth":"no","worst_case":"Attacker runs code inside the browser sandbox after a victim visits a page","analyst_note":"","how_to_check":"- Open chrome://version and compare the version to `156.0.8078.73`\n- On managed machines, check the installed Chrome version with your endpoint tool\n- Note: Chromium and other Chromium-based browsers may ship Skia separately, so check their versions too","needs_analyst":false,"not_affected_if":["chrome-156-or-later"],"who_is_affected":"Any user or machine running Google Chrome older than 156.0.8078.73 is exposed, because the trigger is a web page the browser loads. Exposure is driven by browsing, so managed fleets and kiosks that open untrusted content are the priority. Systems that run no Chrome build below that version can skip it.","user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.0006,"input_tokens":3296,"output_tokens":541,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-118351':14A,17A '-2026':13A,16A '156.0.8078.73':38B,67C 'allow':68C 'arbitrari':52B,74C 'attack':49B,71C 'browser':18B,56B 'bug':28B 'chrome':1A,19B,36B,64C 'chromium':84C 'code':11A,53B,75C 'corrupt':4A,27B,59C 'craft':7A,44B,81C 'cve':12A,15A 'endpoint':20B 'execut':51B,73C 'googl':35B,63C 'graphic':32B 'high':87C 'html':45B,82C 'insid':34B,54B,76C 'let':5A 'librari':33B 'linux':21B 'maco':22B 'memori':3A,26B,58C 'page':9A,46B,83C 'prior':65C 'remot':48B,70C 'run':10A 'runtim':23B 'sandbox':57B,78C 'secur':85C 'sever':86C 'skia':2A,30B,61C 'trigger':41B 'via':79C 'web':8A 'window':24B","nicknames":[],"mitigations":[],"who_affected":"Any user or machine running Google Chrome older than 156.0.8078.73 is exposed, because the trigger is a web page the browser loads. Exposure is driven by browsing, so managed fleets and kiosks that open untrusted content are the priority. Systems that run no Chrome build below that version can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T23:17:04+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-118351","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118351","severity":null,"published_at":"2026-10-27T23:17:04+00:00","modified_at":"2026-10-27T23:17:04+00:00","first_seen_at":"2026-10-27T23:29:44+00:00","fetched_at":"2026-10-27T23:29:44+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}