Live › vulnerability › CVE-2026-113077
Go to dashboardA memory corruption flaw in Core in Google Chrome on Mac, before version 156.0.8078.47, lets a remote attacker read memory inside the browser sandbox. The attacker needs the victim to load a crafted HTML page.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Any Mac running Google Chrome before 156.0.8078.47 is exposed when a user visits an attacker-controlled page. Managed fleets that push Chrome updates centrally should check their installed version; systems on a current Chrome build can skip it.
No product ranges from the sources yet.
chrome://settings/help and read the installed version; anything below 156.0.8078.47 is affected/Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome --version156.0.8078.47 or later via chrome://settings/help or your managed update channelEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Memory corruption in Core in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
This page as .md · .json · in your agent: get_signal("CVE-2026-113077")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.