CVE-2026-113279

High8.8 Published on Oct 20, 2026

Memory corruption in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

CVSS score8.8 / 10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness type (CWE)CWE-119

Vendorsgoogle

Affected products

Vendors	Product	Versions
google	chrome	< 156.0.8078.47

Vulnerabilities

Chrome 156 Closes 353 Security Flaws, Including Six Critical Memory-Safety Bugs

Chrome 156 reaches stable with 353 security fixes, including six critical memory-safety issues across core components.

Oct 21, 202619:18 4 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Affected products

Related articles

Chrome 156 Closes 353 Security Flaws, Including Six Critical Memory-Safety Bugs