Security October 2026 Latest record Chromium: CVE-2026-118317 Memory corruption in HTML Recorded 13 Nov 2026 at 11:07 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position.
See the latest record .
CVE Microsoft Security Response Center
Chromium: CVE-2026-118317 Memory corruption in HTML This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
What it said
CVE CVE-2026-118317
Severity Important
CVSS base score Not published
CVSS vector Not published
Impact Not stated
Exploitation detected Unknown: not stated by MSRC
Publicly disclosed Unknown: not stated by MSRC
Exploitability Not assessed
Component Microsoft Edge (Chromium-based)
Weakness Not stated
Issued by Chrome
Customer action Required: follow the MSRC remediation guidance
Affected products Microsoft Edge (Chromium-based)
Updates that fix it No KB listed
CISA KEV Not listed in the collected catalog
EPSS No EPSS score collected
Public detection template Unknown: detection-template evidence is incomplete or retained
Published 31 Oct 2026 07:00 UTC
Last revised 31 Oct 2026 07:00 UTC
Revision note Information published.
Source evidence when recorded
Microsoft security releases IncompleteRead 13 Nov 2026 at 10:02 UTC
CISA KEV Complete at observationRead 13 Nov 2026 at 11:05 UTC
FIRST EPSS IncompleteRead 13 Nov 2026 at 10:02 UTC
Public detection templates (Nuclei) IncompleteRead 13 Nov 2026 at 10:02 UTC
Coverage describes the sources at this observation. A complete read then does not establish their current position.
What changed
Detection template: No Nuclei template listed → Unknown: detection-template evidence is incomplete or retained
13 Nov 2026 Detection template: Unknown: detection-template evidence is incomplete or retained → No Nuclei template listed
6 Nov 2026 · 17:32:22 UTC Detection template: No Nuclei template listed → Unknown: detection-template evidence is incomplete or retained
6 Nov 2026 · 16:31:02 UTC Detection template: Unknown: detection-template evidence is incomplete or retained → No Nuclei template listed
2 Nov 2026 · 17:30:39 UTC Detection template: No Nuclei template listed → Unknown: detection-template evidence is incomplete or retained
2 Nov 2026 · 16:27:39 UTC Page history
Changes are dated when recorded; day views use the last saved version from that UTC day, and citations stay fixed.
Cite this version Field-level log (20)
Up to 100 recent field edits are shown; older edits may be outside retention.
13 Nov 2026 · 11:07:20 UTC
Public detection template No Nuclei template listed → Unknown: detection-template evidence is incomplete or retained 13 Nov 2026 · 11:07:20 UTC
Source coverage: public-exploit-code Current → Incomplete 13 Nov 2026 · 11:07:20 UTC
Source coverage: first-epss Current → Incomplete 13 Nov 2026 · 11:07:20 UTC
Source coverage: msrc-cvrf Current → Incomplete 6 Nov 2026 · 17:32:22 UTC
Public detection template Unknown: detection-template evidence is incomplete or retained → No Nuclei template listed 6 Nov 2026 · 17:32:22 UTC
Source coverage: public-exploit-code Incomplete → Current 6 Nov 2026 · 17:32:22 UTC
Source coverage: first-epss Incomplete → Current 6 Nov 2026 · 17:32:22 UTC
Source coverage: msrc-cvrf Incomplete → Current 6 Nov 2026 · 16:31:02 UTC
Public detection template No Nuclei template listed → Unknown: detection-template evidence is incomplete or retained 6 Nov 2026 · 16:31:02 UTC
Source coverage: public-exploit-code Current → Incomplete 6 Nov 2026 · 16:31:02 UTC
Source coverage: first-epss Current → Incomplete 6 Nov 2026 · 16:31:02 UTC
Source coverage: msrc-cvrf Current → Incomplete 2 Nov 2026 · 17:30:39 UTC
Public detection template Unknown: detection-template evidence is incomplete or retained → No Nuclei template listed 2 Nov 2026 · 17:30:39 UTC
Source coverage: public-exploit-code Incomplete → Current 2 Nov 2026 · 17:30:39 UTC
Source coverage: first-epss Incomplete → Current 2 Nov 2026 · 17:30:39 UTC
Source coverage: msrc-cvrf Incomplete → Current 2 Nov 2026 · 16:27:39 UTC
Public detection template No Nuclei template listed → Unknown: detection-template evidence is incomplete or retained 2 Nov 2026 · 16:27:39 UTC
Source coverage: public-exploit-code Current → Incomplete 2 Nov 2026 · 16:27:39 UTC
Source coverage: first-epss Current → Incomplete 2 Nov 2026 · 16:27:39 UTC
Source coverage: msrc-cvrf Current → Incomplete