AI and data stack advisories

Severe, 6 weeks977Projects326

977 severe, 6 weeks · 326 projects

GoogleCVE-2026-113196

Google Chrome: improper access control

Google

CVE-2026-113196 · Published Oct 20, 2026 · updated Oct 30, 2026

Medium6.5
Fix: upgrade to 156.0.8078.47 or later
Google advisory

Improper access control in Mobile in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

Affected versions

PackageAffectedFixed in
Chrome
Product
>= 156.0.8078.47, < 156.0.8078.47156.0.8078.47
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Severity from
CISA (its enrichment of the CVE record)
Weakness
CWE-284

More Google advisories

All Google
High 8.8Oct 20Google Chrome: improper input validationCVE-2026-113264fixed in 156.0.8078.47High 8.8Oct 20Google Chrome: memory corruptionCVE-2026-113180fixed in 156.0.8078.47High 8.8Oct 20Google Chrome: use after freeCVE-2026-113170fixed in 156.0.8078.47High 8.8Oct 20Google Chrome: memory corruptionCVE-2026-113143fixed in 156.0.8078.47High 8.8Oct 20Google Chrome: missing authorizationCVE-2026-113128fixed in 156.0.8078.47High 8.8Oct 20Google Chrome: improper access controlCVE-2026-113057fixed in 156.0.8078.47