CVE-2026-118332

Improper input validation in Compositing in Google Chrome prior to version 156.0.8078.73 allows a remote attacker to potentially execute arbitrary code outside the sandbox. This vulnerability can be triggered by a remote attacker using a crafted HTML page . No specific exploit information or dire...

CVE-2026-118336

Google Chrome versions prior to 156.0.8078.73 are vulnerable to a high-severity vulnerability (CVE-2026-118336 ) caused by improper input validation in the Headless component. A remote attacker could leverage a crafted HTML page to potentially execute arbitrary code inside the sandbox or cause a ...

CVE-2026-118336

Improper input validation in Headless in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118328

Improper input validation in WebRTC in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118336

Improper input validation in Headless in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118328

Google Chrome versions prior to 156.0.8078.73 are vulnerable to a High severity issue caused by improper input validation in the WebRTC component. A remote attacker can exploit this by leveraging a crafted HTML page to potentially execute arbitrary code within the sandbox. While the vulnerability...

CVE-2026-118355

Improper input validation in Command in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118355

Improper input validation in Command in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118355

A high-severity improper input validation flaw exists in the Command component of Google Chrome (prior to version 156.0.8078.73 ). A remote attacker could exploit this vulnerability by serving a crafted HTML page to a victim, potentially leading to arbitrary code execution outside the sandbox. Im...

CVE-2026-118321

Improper input validation in Core in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118329

Improper input validation in ANGLE in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118354

Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118354

Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118321

Google Chrome on Android versions prior to 156.0.8078.73 is vulnerable to a high-severity security issue due to improper input validation in the Core component. A remote attacker could exploit this by using a crafted HTML page to potentially execute arbitrary code outside the sandbox . No specifi...

CVE-2026-118354

Google Chrome versions prior to 156.0.8078.73 are vulnerable to a high-severity security issue (CVE-2026-118354) caused by improper input validation in the Skia component. A remote attacker could exploit this by serving a crafted HTML page to a victim, potentially leading to arbitrary code execut...

CVE-2026-118348

Google Chrome is affected by a critical vulnerability (CVE-2026-118348 ) caused by improper input validation within the Skia component. A remote attacker can exploit this by serving a crafted HTML page to a victim, potentially leading to arbitrary code execution inside the browser sandbox. This i...

CVE-2026-118331

Improper input validation in FileAPI in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-118331

Improper input validation in FileAPI in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-118348

Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-118348

Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...