{"id":"CVE-2026-113102","kind":"vulnerability","aliases":["CVE-2026-113102"],"related":[],"title":"Google Chrome: out-of-bounds read in FileSystem lets a web page read sandbox memory","description":"Out of bounds read in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","summary":"Google Chrome versions before 156.0.8078.47 have an out-of-bounds read in the FileSystem component. A remote attacker who lures a user to a crafted HTML page can read memory inside the browser sandbox.","severity":"medium","cvss":6.5,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"google chrome","fixed":["156.0.8078.47"],"affected":"< 156.0.8078.47","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["browsers","chrome","endpoints","managed-fleets","vendor"],"not_affected_if":["chrome-at-or-above-156.0.8078.47"],"how_to_check":"- Open Chrome and check the version under Settings > About Chrome, or run `google-chrome --version` on Linux.\n- Confirm the version is at least `156.0.8078.47`.","fix":"- Update Google Chrome to `156.0.8078.47` or later.\n- Relaunch the browser after the update so the fixed version is running.","status":"open","published_at":"2026-10-20T22:19:02+00:00","first_seen_at":"2026-10-23T21:57:24+00:00","triaged_at":"2026-10-25T03:53:16+00:00","updated_at":"2026-10-25T03:53:16+00:00","category":"vendor","confidence":0.7,"triage":{"at":"2026-10-25T03:53:16Z","model":"claude-haiku-5-5","output":{"fix":"- Update Google Chrome to `156.0.8078.47` or later.\n- Relaunch the browser after the update so the fixed version is running.","reach":"internet","title":"Google Chrome: out-of-bounds read in FileSystem lets a web page read sandbox memory","impact":"low","summary":"Google Chrome versions before 156.0.8078.47 have an out-of-bounds read in the FileSystem component. A remote attacker who lures a user to a crafted HTML page can read memory inside the browser sandbox.","category":"vendor","nicknames":[],"who_cares":["chrome","browsers","endpoints","managed-fleets"],"confidence":0.7,"needs_auth":"no","worst_case":"Attacker reads memory inside the browser sandbox via a crafted page","analyst_note":"","how_to_check":"- Open Chrome and check the version under Settings > About Chrome, or run `google-chrome --version` on Linux.\n- Confirm the version is at least `156.0.8078.47`.","needs_analyst":false,"not_affected_if":["chrome-at-or-above-156.0.8078.47"],"who_is_affected":"Every desktop or mobile device running Google Chrome before 156.0.8078.47 is affected when a user visits an attacker-controlled page. Managed fleets that push Chrome updates centrally should check their deployed version. Systems that do not run Chrome, or that only use Chrome versions at or above the fixed release, can skip it.","user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"medium"},"cost_usd":0.000603,"input_tokens":3335,"output_tokens":539,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-113102':19A,22A '-2026':18A,21A '156.0.8078.47':36B,78C 'allow':79C 'attack':50B,82C 'bound':6A,42B,69C 'browser':25B,65B 'chrome':2A,24A,26B,33B,75C 'chromium':94C 'compon':47B 'craft':57B,91C 'cve':17A,20A 'endpoint':27B 'filesystem':9A,46B,72C 'fleet':30B 'googl':1A,32B,74C 'google':23A 'html':58B,92C 'insid':63B,86C 'let':10A 'lure':52B 'manag':29B 'managed-fleet':28B 'medium':97C 'memori':16A,62B,85C 'out-of-bound':3A,39B 'page':13A,59B,93C 'prior':76C 'read':7A,14A,43B,61B,70C,84C 'remot':49B,81C 'sandbox':15A,66B,88C 'secur':95C 'sever':96C 'user':54B 'vendor':31B 'version':34B 'via':89C 'web':12A","nicknames":[],"mitigations":[],"who_affected":"Every desktop or mobile device running Google Chrome before 156.0.8078.47 is affected when a user visits an attacker-controlled page. Managed fleets that push Chrome updates centrally should check their deployed version. Systems that do not run Chrome, or that only use Chrome versions at or above the fixed release, can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T22:19:02+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss_by":"134c704f-9b21-4f2e-91b3-4a467353bcc0","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-113102","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113102","severity":null,"published_at":"2026-10-20T22:19:02+00:00","modified_at":"2026-10-22T15:33:52+00:00","first_seen_at":"2026-10-23T21:57:24+00:00","fetched_at":"2026-10-23T22:28:59+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}