CVE-2026-113072

Critical9.6 Published on Oct 20, 2026

Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

CVSS score9.6 / 10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Weakness type (CWE)CWE-119

Vulnerabilities

Chrome 156 Closes 353 Security Flaws, Including Six Critical Memory-Safety Bugs

Chrome 156 reaches stable with 353 security fixes, including six critical memory-safety issues across core components.

Oct 21, 202619:18 4 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

Chrome 156 Closes 353 Security Flaws, Including Six Critical Memory-Safety Bugs