AI and data stack advisories

Severe, 6 weeks977Projects326

977 severe, 6 weeks · 326 projects

GoogleCVE-2026-113264

Google Chrome: improper input validation

Google

CVE-2026-113264 · Published Oct 20, 2026 · updated Oct 30, 2026

High8.8
Fix: upgrade to 156.0.8078.47 or later
Google advisory

Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Affected versions

PackageAffectedFixed in
Chrome
Product
>= 156.0.8078.47, < 156.0.8078.47156.0.8078.47
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity from
NVD
Weakness
CWE-20

More Google advisories

All Google
Medium 6.5Oct 20Google Chrome: improper access controlCVE-2026-113196fixed in 156.0.8078.47High 8.8Oct 20Google Chrome: memory corruptionCVE-2026-113180fixed in 156.0.8078.47High 8.8Oct 20Google Chrome: use after freeCVE-2026-113170fixed in 156.0.8078.47High 8.8Oct 20Google Chrome: memory corruptionCVE-2026-113143fixed in 156.0.8078.47High 8.8Oct 20Google Chrome: missing authorizationCVE-2026-113128fixed in 156.0.8078.47High 8.8Oct 20Google Chrome: improper access controlCVE-2026-113057fixed in 156.0.8078.47