CVE-2026-118308

Vendor

Google

Product

Chrome

EPSS

0.003 (p24)

Weakness

CWE-416

Exposure class

Browser

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 45
   Advisory MSRC 19h ago

   Chromium: CVE-2026-118308 Use after free in SVG

   This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

   Fix available CVE-2026-118308 Microsoft Google
2. 19
   CVE NVD 4d ago

   Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via…

   Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

   CVE-2026-118308 Google