AI and data stack advisories

Severe, 6 weeks977Projects326

977 severe, 6 weeks · 326 projects

GoogleCVE-2026-113128

Google Chrome: missing authorization

Google

CVE-2026-113128 · Published Oct 20, 2026 · updated Oct 30, 2026

High8.8
Fix: upgrade to 156.0.8078.47 or later
Google advisory

Missing authorization in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

Affected versions

PackageAffectedFixed in
Chrome
Product
>= 156.0.8078.47, < 156.0.8078.47156.0.8078.47
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity from
NVD
Weakness
CWE-862

More Google advisories

All Google
High 8.8Oct 20Google Chrome: improper input validationCVE-2026-113264fixed in 156.0.8078.47Medium 6.5Oct 20Google Chrome: improper access controlCVE-2026-113196fixed in 156.0.8078.47High 8.8Oct 20Google Chrome: memory corruptionCVE-2026-113180fixed in 156.0.8078.47High 8.8Oct 20Google Chrome: use after freeCVE-2026-113170fixed in 156.0.8078.47High 8.8Oct 20Google Chrome: memory corruptionCVE-2026-113143fixed in 156.0.8078.47High 8.8Oct 20Google Chrome: improper access controlCVE-2026-113057fixed in 156.0.8078.47