CVE-2026-118357: Use After Free

Q: What does an attacker need to exploit this issue?

The attacker needs to cause a user to load a crafted HTML page remotely. Successful exploitation could potentially execute arbitrary code inside the Chrome sandbox.

Q: Which Chrome versions are affected?

Google Chrome versions prior to 156.0.8078.73 are affected. Updating to version 156.0.8078.73 or later addresses the affected version range.

Q: Does this vulnerability allow code execution outside the sandbox?

The available information states that arbitrary code execution is potentially possible inside the sandbox. It does not state that the issue alone enables escaping the Chrome sandbox or executing code on the underlying operating system.

Published Oct 27, 2026

Updated

Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Affected Software

1 affected component

Google Chrome<156.0.8078.73

Event History

Oct 27, 2026

CVE Published

via MITRE·11:03 PM

Data Sourced

via MITRE·11:03 PM

DescriptionWeakness

Data Sourced

via NVD·11:17 PM

DescriptionWeakness

Frequently Asked Questions

What does an attacker need to exploit this issue?

The attacker needs to cause a user to load a crafted HTML page remotely. Successful exploitation could potentially execute arbitrary code inside the Chrome sandbox.

Which Chrome versions are affected?

Google Chrome versions prior to 156.0.8078.73 are affected. Updating to version 156.0.8078.73 or later addresses the affected version range.

Does this vulnerability allow code execution outside the sandbox?

The available information states that arbitrary code execution is potentially possible inside the sandbox. It does not state that the issue alone enables escaping the Chrome sandbox or executing code on the underlying operating system.

CVE-2026-118357: Use After Free

Affected Software

Event History

Frequently Asked Questions

What does an attacker need to exploit this issue?

Which Chrome versions are affected?

Does this vulnerability allow code execution outside the sandbox?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

Which Chrome versions are affected?

Does this vulnerability allow code execution outside the sandbox?