Live › vulnerability › CVE-2026-113026
Go to dashboardA memory corruption flaw in Chrome's PDF handling on Android lets a crafted HTML page read memory inside the browser sandbox. The sources rate it Medium and do not report active exploitation.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Anyone running Google Chrome on Android older than is exposed when they open a crafted HTML page that triggers the PDF component. Teams can skip this if all devices are on a current Chrome build or do not use Chrome on Android.
156.0.8078.47| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| google chrome | vendor | < 156.0.8078.47 | 156.0.8078.47 |
chrome://version156.0.8078.47156.0.8078.47 or later via Google PlayEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Memory corruption in PDF in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
This page as .md · .json · in your agent: get_signal("CVE-2026-113026")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.