{"id":"CVE-2026-113049","kind":"vulnerability","aliases":["CVE-2026-113049"],"related":[],"title":"Chrome: memory corruption lets a crafted web page run code in sandbox","description":"Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","summary":"A memory corruption bug in Chrome's core code lets an attacker who lures a user to a crafted HTML page potentially run arbitrary code inside the browser sandbox. The sources say the flaw is fixed in Chrome 156.0.8078.47 and rate it high (CVSS 8.8) with the Chromium security severity Medium.","severity":"high","cvss":8.8,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"google chrome","fixed":["156.0.8078.47"],"affected":"< 156.0.8078.47","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["browsers","chrome","desktop","other","runtime"],"not_affected_if":["version-156.0.8078.47-or-later"],"how_to_check":"Open chrome://version in Chrome and compare the version with 156.0.8078.47.","fix":"Update Google Chrome to 156.0.8078.47 or later.","status":"open","published_at":"2026-10-20T22:18:56+00:00","first_seen_at":"2026-10-23T21:57:23+00:00","triaged_at":"2026-10-23T22:37:58+00:00","updated_at":"2026-10-23T22:37:58+00:00","category":"other","confidence":0.8,"triage":{"at":"2026-10-23T22:37:58Z","model":"claude-haiku-5-5","output":{"fix":"Update Google Chrome to 156.0.8078.47 or later.\nunknown","reach":"internet","title":"Chrome: memory corruption lets a crafted web page run code in sandbox","impact":"high","summary":"A memory corruption bug in Chrome's core code lets an attacker who lures a user to a crafted HTML page potentially run arbitrary code inside the browser sandbox. The sources say the flaw is fixed in Chrome 156.0.8078.47 and rate it high (CVSS 8.8) with the Chromium security severity Medium.","category":"other","who_cares":["chrome","desktop"],"confidence":0.8,"needs_auth":"no","worst_case":"Attacker runs code inside the browser sandbox after a user visits a page.","analyst_note":"","how_to_check":"Open chrome://version in Chrome and compare the version with 156.0.8078.47.\nunknown\nunknown","needs_analyst":false,"not_affected_if":["version-156.0.8078.47-or-later"],"user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000962,"input_tokens":2944,"output_tokens":1335,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-113049':15A,18A '-2026':14A,17A '156.0.8078.47':64B,86C '8.8':70B 'allow':87C 'arbitrari':49B,94C 'attack':37B,90C 'browser':21B,53B 'bug':29B 'chrome':1A,20A,22B,31B,63B,83C 'chromium':73B,104C 'code':10A,34B,50B,95C 'core':33B,80C 'corrupt':3A,28B,78C 'craft':6A,44B,101C 'cve':13A,16A 'cvss':69B 'desktop':23B 'execut':93C 'fix':61B 'flaw':59B 'googl':82C 'google':19A 'high':68B 'html':45B,102C 'insid':51B,96C 'let':4A,35B 'lure':39B 'medium':76B,107C 'memori':2A,27B,77C 'page':8A,46B,103C 'potenti':47B,92C 'prior':84C 'rate':66B 'remot':89C 'run':9A,48B 'runtim':25B 'sandbox':12A,54B,98C 'say':57B 'secur':74B,105C 'sever':75B,106C 'sourc':56B 'user':41B 'via':99C 'web':7A","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T22:18:56+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"134c704f-9b21-4f2e-91b3-4a467353bcc0","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-113049","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113049","severity":null,"published_at":"2026-10-20T22:18:56+00:00","modified_at":"2026-10-22T15:37:51+00:00","first_seen_at":"2026-10-23T21:57:23+00:00","fetched_at":"2026-10-23T22:28:59+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}