AI and data stack advisories

Severe, 6 weeks1490Projects326

1490 severe, 6 weeks · 326 projects

GoogleCVE-2026-113310

Google Chrome: use after free

Google

CVE-2026-113310 · Published Oct 20, 2026 · updated Nov 3, 2026

Medium6.5
Fix: upgrade to 156.0.8078.47 or later
Google advisory

Use after free in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed an adjacent attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Affected versions

PackageAffectedFixed in
Chrome
Product
>= 156.0.8078.47, < 156.0.8078.47156.0.8078.47
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Severity from
CISA (its enrichment of the CVE record)
Weakness
CWE-416

More Google advisories

All Google
High 8.8Oct 20Google Chrome: improper authorizationCVE-2026-113343fixed in 156.0.8078.47High 8.8Oct 20Google Chrome: local attacker could read memoryCVE-2026-113344fixed in 156.0.8078.47High 8.8Oct 20Google Chrome: race conditionCVE-2026-113335fixed in 156.0.8078.47Critical 9.6Oct 20Google Chrome: use after freeCVE-2026-113336fixed in 156.0.8078.47High 8.8Oct 20Google Chrome: use after freeCVE-2026-113337fixed in 156.0.8078.47High 8.8Oct 20Google Chrome: use after freeCVE-2026-113339fixed in 156.0.8078.47