CVE-2026-118309: Input Validation

Q: Which installations are affected?

Google Chrome for Android versions prior to 156.0.8078.73 are affected. The provided information does not state whether any particular Android version or Chrome configuration changes exposure.

Q: What does an attacker need to exploit this issue?

The issue can be triggered remotely through a crafted HTML page. The provided information does not identify additional prerequisites, such as local access, authentication, or user interaction.

Q: What is the potential impact of successful exploitation?

A remote attacker could potentially execute arbitrary code outside the Chrome sandbox. Chromium rates the issue as High severity.

Published Oct 27, 2026

Updated

Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Affected Software

1 affected component

Google Chrome for Android<156.0.8078.73

Event History

Oct 27, 2026

CVE Published

via MITRE·11:03 PM

Data Sourced

via MITRE·11:03 PM

DescriptionWeakness

Data Sourced

via NVD·11:16 PM

DescriptionWeakness

Frequently Asked Questions

Which installations are affected?

Google Chrome for Android versions prior to 156.0.8078.73 are affected. The provided information does not state whether any particular Android version or Chrome configuration changes exposure.

What does an attacker need to exploit this issue?

The issue can be triggered remotely through a crafted HTML page. The provided information does not identify additional prerequisites, such as local access, authentication, or user interaction.

What is the potential impact of successful exploitation?

A remote attacker could potentially execute arbitrary code outside the Chrome sandbox. Chromium rates the issue as High severity.

CVE-2026-118309: Input Validation

Affected Software

Event History

Frequently Asked Questions

Which installations are affected?

What does an attacker need to exploit this issue?

What is the potential impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which installations are affected?

What does an attacker need to exploit this issue?

What is the potential impact of successful exploitation?