anonhaven

CVE-2026-118356

NONE EPSS 0.21%
Updated Oct 28, 2026
Google
Parameter Value
Affected Versions before 156.0.8078.73
Type CWE-416 (Use After Free)
Vendor Google
Public PoC No

Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Weakness Type (CWE)

CWE-416 Use After Free

Vulnerable Products

google:chrome

References 2

https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop…
NVD
https://issues.chromium.org/issues/575851252
NVD
Share Post Share Share Share

Related Vulnerabilities

CVE-2026-110185

Bitpressadmin

5.9

CVE-2026-110020

Google

6.5

CVE-2026-115522

Google

5.3

CVE-2026-118359

Google

None

CVE-2026-118358

Google

None