IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
9.6Crítica

CVE-2026-118342

Google Chrome Publicada: (hace 16 días)

Descripción

Use after free in Editing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Debilidad (CWE): CWE-416

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
Google Chrome 156.0.8078.73 – < 156.0.8078.73

Referencias y parches

Coincidencias CPE (NVD) (1)
  • cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* < 156.0.8078.73

CVE recientes del mismo producto — Google Chrome

8.8Alta
CVE-2026-126860
Google Chrome

Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

8.8Alta
CVE-2026-126890
Google Chrome

Out of bounds read in Media in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

8.8Alta
CVE-2026-126899
Google Chrome

Use after free in Elements in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

4.3Media
CVE-2026-126920
Google Chrome

Information leak in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)

3.1Baja
CVE-2026-126841
Google Chrome

Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

8.8Alta
CVE-2026-126868
Google Chrome

Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)