Live › vulnerability › CVE-2026-119262
A flaw in V8, the JavaScript engine inside Google Chrome, lets a remote attacker execute arbitrary code inside the browser sandbox when a victim opens a crafted HTML page. Chromium rates it High severity.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 01:27 UTC. All times on this page are UTC.
Anyone running Google Chrome older than 156.0.8078.79 is exposed when they load untrusted web pages. Servers and applications are not affected unless they embed a vulnerable Chrome build, such as a headless browser used for scraping or rendering; those teams should check their Chrome version.
No product ranges from the sources yet.
google-chrome --version on Linux.156.0.8078.79; anything older is affected.156.0.8078.79 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Improper input validation in V8 in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
This page as .md · .json · in your agent: get_signal("CVE-2026-119262")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.