CVE-2026-118306

Published on Oct 27, 2026

Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Weakness type (CWE)CWE-119

Related articles

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database