CVE-2026-119262

Quick assessment

Affected

Google Chrome

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 Google Chrome 156.0.8078.79 之前的版本中，V8 引擎存在输入验证不当的漏洞，允许远程攻击者通过精心构造的 HTML 页面，在沙箱内执行任意代码。（Chromium 安全严重等级：高）

AI Predicted 8.8 Difficulty: Moderate Updated Oct 30, 2026

Possible ATT&CK Techniques 2 AI

T1059.007 · JavaScript T1190 · Exploit Public-Facing Application

Updated Oct 30, 2026

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

Improper input validation in V8 in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

输入验证不恰当

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Google	Chrome	156.0.8078.79 ~ 156.0.8078.79	-

II. Public POCs for CVE-2026-119262

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-119262

请登录查看更多情报信息。

Other References for CVE-2026-119262 (2)

https://www.cve.org/CVERecord?id=CVE-2026-119262

Same Patch Batch · Google · 2026-10-30 · 21 CVEs total

CVE-2026-119261		Chrome 156 以下 Skia 输入验证漏洞致任意代码执行
CVE-2026-76024		Chrome 156.0.8078.79 前 MediaStream 内存破坏漏洞
CVE-2026-76027		Chrome 156.0.8078.79 前 CacheStorage 内存破坏漏洞
CVE-2026-76029		Chrome 156.0.8078.79 前网络内存破坏漏洞
CVE-2026-76025		Chrome 156.0.8078.79 前 FileSystem 释放后使用漏洞
CVE-2026-76028		Chrome 156.0.8078.79 前 FileSystem 释放后使用漏洞
CVE-2026-76030		Chrome 156.0.8078.79 前文件系统内存破坏漏洞
CVE-2026-76026		Chrome 156 前版 Autofill 内存破坏漏洞
CVE-2026-119265		Chrome 156 之前配额内存破坏漏洞
CVE-2026-119264		Chrome 156 之前 Dawn 内存破坏漏洞
CVE-2026-119269		Chrome 156.0.8078.79 前 Blink 释放后使用漏洞
CVE-2026-119260		Chrome 156.0.8078.79 前版本 Frames 存在释放后使用漏洞
CVE-2026-119263		Chrome 156 垃圾回收内存破坏导致远程代码执行
CVE-2026-76031		Chrome 156.0.8078.79 前 Input 模块 Use-after-free 漏洞
CVE-2026-119266		Chrome 156.0.8078.79 前Quota存在释放后使用漏洞
CVE-2026-119270		Chrome 156.0.8078.79 前 CacheStorage 任意代码执行
CVE-2026-119267		Chrome 156.0.8078.79 前 DOM 内存破坏漏洞
CVE-2026-119271		Chrome 156.0.8078.79 之前 Skia 释放后使用漏洞
CVE-2026-119272		Chrome 156.0.8078.79 之前 FileSystem 越界读漏洞
CVE-2026-119268		Chrome 156.0.8078.79 编辑整数溢出漏洞

IV. Related Vulnerabilities

Same product: Chrome

Same vendor: Google

Same weakness: CWE-20