山本大介 @𝕏@b4rskbe5
CVE-2026-118357 これはサンドボックス内で任意の攻撃が可能っぽい。 CVE-2026-118318 こっちはメモリ解放後に読み取れるって。 CVE-2026-118312 こいつはサンドボックス外で実行可能性ありだと。 CVE-2026-118338 これはサンドボックス内で実行可能と。
00000466
484 followersView on X
CVE-2026-118338(google / chrome)
LOWCVSS 8.8 · HIGHSignal is active with 1 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
0.0/ 10 priority
Sources & remediation
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-416
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Are you affected?
If you run products in this scope, you should treat this CVE as relevant to your environment.
- chrome
Threat summary
- 1 mentions across 1 observed day
What's happening
- 1 total mentions across 1 day
Affected systems
Vendors
Products
chrome
Deep dive
Activity timeline1 mentions / 1d
Full discourse1 post
CPE platform detail1 entries
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | chrome | - | - | - |