CVE-2026-119270
published 2026-10-30CVE-2026-119270: Improper input validation in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the…
PriorityP352high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
EPSS
0.21%
11.6th percentile
Improper input validation in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| chrome | < 156.0.8078.79 | 156.0.8078.79 | |
| chrome | >= 156.0.8078.79 < 156.0.8078.79 | 156.0.8078.79 | |
| chrome_desktop | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Chrome
Stable Channel Update for Desktop: CVE-2026-119270
vendor_chrome·2026-10-29
CVE-2026-119270 [HIGH] Stable Channel Update for Desktop: CVE-2026-119270
Stable Channel Update for Desktop
CVE-2026-119270: Improper input validation in CacheStorage. Reported by Google on 2026-10-24 [N/A][ 577403270 ] High CVE-2026-119271: Use after free in Skia
Reported by Google on 2026-10-24 [N/A][ 569012543 ] Medium CVE-2026-119272: Out of bounds read in FileSystem
Severity: high
VulDB
Google Chrome up to 156.0.8078.73 CacheStorage input validation
vuldb·2026-10-30
CVE-2026-119270 [CRITICAL] Google Chrome up to 156.0.8078.73 CacheStorage input validation
A vulnerability classified as critical was found in Google Chrome. This issue affects some unknown processing of the component CacheStorage. Executing a manipulation can lead to improper input validation.
This vulnerability is handled as CVE-2026-119270. The attack can be executed remotely. There is not any exploit available.
Upgrading the affected component is advised.
No detection rules found.
No public exploits indexed.
2026-10-30
Published