CVE-2026-118311: Buffer Overflow
Published Oct 27, 2026
·Updated
Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Affected Software
1 affected component
Google Chrome<156.0.8078.73
Event History
Oct 27, 2026
CVE Published
via MITRE·11:03 PM
Data Sourced
via MITRE·11:03 PM
DescriptionWeakness
Data Sourced
via NVD·11:16 PM
DescriptionWeakness
Frequently Asked Questions
1
Who is exposed to this issue?
Users of Google Chrome versions prior to 156.0.8078.73 are affected when Chrome processes a crafted HTML page. The reported code execution is inside the browser sandbox.
2
What does an attacker need to exploit it?
An attacker needs to cause the target to load a crafted HTML page remotely. No additional prerequisites are stated in the available information.
3
What is the remediation?
Update Google Chrome to version 156.0.8078.73 or later. The available information does not provide an alternative mitigation if updating cannot be performed immediately.