{"id":"CVE-2026-118332","published":"2026-10-27T23:17:01.477","lastModified":"2026-10-27T23:17:01.477","description":"Improper input validation in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-20"],"vendors":[],"products":[],"references":[{"url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html","tags":[]},{"url":"https://issues.chromium.org/issues/574030524","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}