Live › vulnerability › CVE-2026-119261
Google Chrome's Skia graphics library does not validate input properly, so a crafted HTML page can make the browser execute attacker code outside its sandbox. Chromium rates it High severity.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 01:27 UTC. All times on this page are UTC.
Anyone running Google Chrome before 156.0.8078.79 who opens untrusted web pages is exposed, since the flaw is triggered by a crafted HTML page. Managed fleets running older Chrome builds should be checked; systems using other browsers are not affected by this entry.
No product ranges from the sources yet.
google-chrome --version on Linux156.0.8078.79; anything older is in the affected range156.0.8078.79 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Improper input validation in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
This page as .md · .json · in your agent: get_signal("CVE-2026-119261")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.