CVE-2026-118358
High · 8.8CVSS
8.8
EPSS
0.4%
Published
Oct 27, 2026
CISA due date
—
The record
Memory corruption in WebAudio in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-76030 Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote… CWE-119
- CVE-2026-76026 Memory corruption in Autofill in Google Chrome prior to 156.0.8078.79 allowed a remote… CWE-119
- CVE-2026-76027 Memory corruption in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a… CWE-119
- CVE-2026-76029 Memory corruption in Network in Google Chrome prior to 156.0.8078.79 allowed a remote… CWE-119
- CVE-2026-76024 Memory corruption in MediaStream in Google Chrome prior to 156.0.8078.79 allowed a remote… CWE-119
- CVE-2026-119264 Memory corruption in Dawn in Google Chrome prior to 156.0.8078.79 allowed a remote… CWE-119
- CVE-2026-119265 Memory corruption in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote… CWE-119
- CVE-2026-119263 Memory corruption in GarbageCollection in Google Chrome prior to 156.0.8078.79 allowed a… CWE-119