Live › vulnerability › CVE-2026-119268
Google Chrome before 156.0.8078.79 has an integer overflow in its Editing component. A remote attacker who gets a user to open a crafted HTML page could potentially execute arbitrary code inside the browser sandbox.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 01:27 UTC. All times on this page are UTC.
Any device running Google Chrome before 156.0.8078.79 is exposed when a user visits a malicious page. Managed fleets with auto-update disabled are most at risk. Systems on a fixed version or with a different browser are not affected by this entry.
No product ranges from the sources yet.
chrome://settings/help, and read the installed version; compare it with 156.0.8078.79.156.0.8078.79 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Integer overflow in Editing in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
This page as .md · .json · in your agent: get_signal("CVE-2026-119268")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.