HighVulnerabilityCVE-2026-118308updated 31 Oct 2026, 18:00 UTC

Chromium/Microsoft Edge: use-after-free in SVG handling (CVE-2026-118308)

Official source

Severity	HighVulnerability
Being exploited?	UnclearNo reports either way yet
Fix available?	UnclearNo fixed version published in the sources yet
How sure is this?	Official sourceBacked by an official source

Timeline

31 Oct 2026, 14:00 UTC
Publicly disclosed
31 Oct 2026, 14:00 UTC
Reported by Microsoft MSRC · Microsoft MSRC
31 Oct 2026, 18:00 UTC
Picked up by Zero Radar

Sources 1 report, oldest first

Official vendor, government CERT or advisory database

Chromium: CVE-2026-118308 Use after free in SVGMicrosoft MSRC · 31 Oct 2026, 14:00 UTC

Technical details

ID: CVE-2026-118308
Disclosed: 31 Oct 2026, 14:00 UTC
On Zero Radar: 31 Oct 2026, 18:00 UTC (4 h after disclosure)
Last change: 31 Oct 2026, 18:00 UTC

This entry has not been explained yet. The text comes straight from the source. How Zero Radar works

Chromium/Microsoft Edge: use-after-free in SVG handling (CVE-2026-118308) · Zero Radar