Live › vulnerability › CVE-2026-119267
Google Chrome versions before 156.0.8078.79 have a memory corruption bug in the DOM, the page-building part of the browser. A remote attacker can use a crafted HTML page to potentially run arbitrary code inside the browser sandbox.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 01:27 UTC. All times on this page are UTC.
Anyone running Google Chrome before 156.0.8078.79 is exposed when they open a malicious web page. Chromium-based browsers that have not yet taken the upstream fix are also at risk. Systems where Chrome is not used as a browser are not affected.
No product ranges from the sources yet.
chrome --version on the command line.156.0.8078.79.156.0.8078.79 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Memory corruption in DOM in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
This page as .md · .json · in your agent: get_signal("CVE-2026-119267")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.