{"id":"CVE-2026-118354","published":"2026-10-27T23:17:04.507","lastModified":"2026-10-27T23:17:04.507","description":"Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-20"],"vendors":[],"products":[],"references":[{"url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html","tags":[]},{"url":"https://issues.chromium.org/issues/568936430","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}