AI and data stack advisories

Severe, 6 weeks977Projects326

977 severe, 6 weeks · 326 projects

GoogleCVE-2026-113170

Google Chrome: use after free

Google

CVE-2026-113170 · Published Oct 20, 2026 · updated Oct 29, 2026

High8.8
Fix: upgrade to 156.0.8078.47 or later
Google advisory

Use after free in Autofill in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Affected versions

PackageAffectedFixed in
Chrome
Product
>= 156.0.8078.47, < 156.0.8078.47156.0.8078.47
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity from
CISA (its enrichment of the CVE record)
Weakness
CWE-416

More Google advisories

All Google
High 8.8Oct 20Google Chrome: improper input validationCVE-2026-113264fixed in 156.0.8078.47Medium 6.5Oct 20Google Chrome: improper access controlCVE-2026-113196fixed in 156.0.8078.47High 8.8Oct 20Google Chrome: memory corruptionCVE-2026-113180fixed in 156.0.8078.47High 8.8Oct 20Google Chrome: memory corruptionCVE-2026-113143fixed in 156.0.8078.47High 8.8Oct 20Google Chrome: missing authorizationCVE-2026-113128fixed in 156.0.8078.47High 8.8Oct 20Google Chrome: improper access controlCVE-2026-113057fixed in 156.0.8078.47