AI and data stack advisories

Severe, 6 weeks1490Projects326

1490 severe, 6 weeks · 326 projects

GoogleCVE-2026-113158

Google Chrome: use after free

Google

CVE-2026-113158 · Published Oct 20, 2026 · updated Nov 3, 2026

High8.8
Fix: upgrade to 156.0.8078.47 or later
Google advisory

Use after free in Streaming in Google Chrome prior to 156.0.8078.47 allowed an adjacent attacker to potentially execute arbitrary code inside the sandbox via crafted network traffic. (Chromium security severity: Medium)

Affected versions

PackageAffectedFixed in
Chrome
Product
>= 156.0.8078.47, < 156.0.8078.47156.0.8078.47
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity from
CISA (its enrichment of the CVE record)
Weakness
CWE-416

More Google advisories

All Google
High 8.8Oct 20Google Chrome: improper authorizationCVE-2026-113343fixed in 156.0.8078.47High 8.8Oct 20Google Chrome: local attacker could read memoryCVE-2026-113344fixed in 156.0.8078.47High 8.8Oct 20Google Chrome: race conditionCVE-2026-113335fixed in 156.0.8078.47Critical 9.6Oct 20Google Chrome: use after freeCVE-2026-113336fixed in 156.0.8078.47High 8.8Oct 20Google Chrome: use after freeCVE-2026-113337fixed in 156.0.8078.47High 8.8Oct 20Google Chrome: use after freeCVE-2026-113339fixed in 156.0.8078.47