CVE-2026-118335 HIGH 8.8
Published: 2026-10-27 23:17:01 UTC · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Categories: macOS / Apple
Improper input validation in Metrics in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Weakness: CWE-20
Affected products
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*