CVE-2026-118309

Vendor

Google

Product

Chrome

Weakness

CWE-20

Exposure class

Browser, Mobile OS

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 45
   Advisory MSRC 8h ago

   Chromium CVE-2026-118309: Incorrect reference resolution

   This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

   Fix available CVE-2026-118309 Microsoft Google
2. 11
   CVE NVD 8d ago

   Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code…

   Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

   CVE-2026-118309 Google