CVE-2026-113101

High8.8 Published on Oct 20, 2026

Use after free in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVSS score8.8 / 10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness type (CWE)CWE-416

Vulnerabilities

Chrome 156 Closes 353 Security Flaws, Including Six Critical Memory-Safety Bugs

Chrome 156 reaches stable with 353 security fixes, including six critical memory-safety issues across core components.

Oct 21, 202619:18 4 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

Chrome 156 Closes 353 Security Flaws, Including Six Critical Memory-Safety Bugs