Threat video1:00
Chrome 156 Patches 52 Flaws: Detection & IOCs
Chrome 156 fixes 52 flaws, headlined by CVE-2026-118306, a FileSystem sandbox escape. Includes 9 detection rules (one free in Splunk SPL) and 7 IOCs.
Chapters
- 0:00The hook52 Chrome patches include one sandbox escape fix.
- 0:05The storyLab reproduced sandbox escape in vulnerable Chrome.
- 0:12Attack pathAccording to reports, a crafted HTML page triggers the vulnerability.
- 0:29AttributionNo threat actor: this was defensive research.
- 0:33Indicators of compromiseNo malicious indicators were published.
- 0:39MITRE ATT&CK techniques2 ATT&CK techniques, in execution.
- 0:43Remediation2 steps now: Update Google Chrome.
- 0:50Detection rules9 detection rules, in SPL, KQL and Sigma.
Transcript
0:0052 Chrome patches include one sandbox escape fix.
0:05Lab reproduced sandbox escape in vulnerable Chrome.
0:09Memory bug enabled code execution.
0:12According to reports, a crafted HTML page triggers the vulnerability.
0:17Memory-corruption flaws allow code execution inside older Chrome.
0:22Memory corruption breaks isolation, enabling escape from the sandbox.
0:29No threat actor: this was defensive research.
0:34No malicious indicators were published.
0:392 ATT&CK techniques, in execution.
0:442 steps now: Update Google Chrome.
0:519 detection rules, in SPL, KQL and Sigma.
0:56Threadlinqs. The unified security engineering platform.