AI and data stack advisories

Severe, 6 weeks1490Projects326

1490 severe, 6 weeks · 326 projects

GoogleCVE-2026-113333

Google Chrome: race condition

Google

CVE-2026-113333 · Published Oct 20, 2026 · updated Nov 3, 2026

Medium6.5
Fix: upgrade to 156.0.8078.47 or later
Google advisory

Race condition in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Medium)

Affected versions

PackageAffectedFixed in
Chrome
Product
>= 156.0.8078.47, < 156.0.8078.47156.0.8078.47
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Severity from
CISA (its enrichment of the CVE record)
Weakness
CWE-367

More Google advisories

All Google
High 8.8Oct 20Google Chrome: improper authorizationCVE-2026-113343fixed in 156.0.8078.47High 8.8Oct 20Google Chrome: local attacker could read memoryCVE-2026-113344fixed in 156.0.8078.47High 8.8Oct 20Google Chrome: race conditionCVE-2026-113335fixed in 156.0.8078.47Critical 9.6Oct 20Google Chrome: use after freeCVE-2026-113336fixed in 156.0.8078.47High 8.8Oct 20Google Chrome: use after freeCVE-2026-113337fixed in 156.0.8078.47High 8.8Oct 20Google Chrome: use after freeCVE-2026-113339fixed in 156.0.8078.47