Live › vulnerability › CVE-2026-119264
A memory corruption flaw in Dawn, the WebGPU graphics component of Google Chrome, lets a remote attacker run arbitrary code inside the browser sandbox. The attack is triggered by a crafted HTML page that the user visits.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 01:27 UTC. All times on this page are UTC.
Anyone running Google Chrome before 156.0.8078.79 is exposed when they open a crafted web page. Managed fleets and other Chromium-based browsers that bundle Dawn should be checked separately. Users on a current Chrome build can skip it.
No product ranges from the sources yet.
chrome --version on the command line156.0.8078.79156.0.8078.79 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Memory corruption in Dawn in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
This page as .md · .json · in your agent: get_signal("CVE-2026-119264")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.