Live › vulnerability › CVE-2026-113045
Go to dashboardAn out-of-bounds read in the Offline component of Google Chrome on Android lets a remote attacker read memory inside the browser sandbox when the user opens a crafted HTML page. The sources rate it Medium and do not say that code execution follows.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Users of Google Chrome on Android older than . Any device with an older Chrome build that browses untrusted pages is in scope; a device on a current build is not. The sources do not describe server-side exposure.
156.0.8078.47| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| google chrome | vendor | < 156.0.8078.47 | 156.0.8078.47 |
chrome://version in Chrome on Android and compare the version with 156.0.8078.47156.0.8078.47 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Out of bounds read in Offline in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
This page as .md · .json · in your agent: get_signal("CVE-2026-113045")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.