CVE-2026-113341

Medium6.5 Published on Oct 20, 2026

Memory corruption in Skia in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

CVSS score6.5 / 10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness type (CWE)CWE-119

Vulnerabilities

Chrome 156 Closes 353 Security Flaws, Including Six Critical Memory-Safety Bugs

Chrome 156 reaches stable with 353 security fixes, including six critical memory-safety issues across core components.

Oct 21, 202619:18 4 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

Chrome 156 Closes 353 Security Flaws, Including Six Critical Memory-Safety Bugs