SWS Vulnerability Watch

Back to findings

CVE-2026-118334 in Google Chrome latest

Use after free in ImageCapture in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Severity
High 8.8
Exploitation
0% chance of exploit
in the next 30 days
Fix
Update to 156.0.8078.73
Where
Workstation tool
How it matched
Recent CVE for this product – check your installed version
First seen
2026-11-05 01:13:58 UTC
Source
https://nvd.nist.gov/vuln/detail/CVE-2026-118334