山本大介 @𝕏@b4rskbe5
CVE-2026-118357 これはサンドボックス内で任意の攻撃が可能っぽい。 CVE-2026-118318 こっちはメモリ解放後に読み取れるって。 CVE-2026-118312 こいつはサンドボックス外で実行可能性ありだと。 CVE-2026-118338 これはサンドボックス内で実行可能と。
00000466
484 followersView on X
CVE-2026-118312
LOWCVSS 9.6 · CRITICALSignal is active with 1 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
Memory corruption in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
0.0/ 10 priority
Sources & remediation
Other references
Weakness type (CWE)
CWE-119
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Threat summary
- 1 mentions across 1 observed day
What's happening
- 1 total mentions across 1 day