CVE-2026-118335

Vendor

Google

Product

Chrome

EPSS

0.003 (p18)

Weakness

CWE-20

Exposure class

Browser

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 45
   Advisory MSRC 19h ago

   Chromium: CVE-2026-118335 Improper input validation in Metrics

   This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

   Fix available CVE-2026-118335 Microsoft Google
2. 19
   CVE NVD 4d ago

   Improper input validation in Metrics in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary…

   Improper input validation in Metrics in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

   CVE-2026-118335 Google