{"id":"CVE-2026-113137","kind":"vulnerability","aliases":["CVE-2026-113137"],"related":[],"title":"Chrome: extensions memory corruption lets a web page read sandbox memory","description":"Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","summary":"A crafted HTML page can corrupt memory in the Chrome Extensions component, letting an attacker read memory inside the browser sandbox. The sources say the impact is potential sandbox memory read, not code execution.","severity":"high","cvss":8.8,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"google chrome","fixed":["156.0.8078.47"],"affected":"< 156.0.8078.47","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["chrome","linux","macos","other","package","windows"],"not_affected_if":["already-on-156.0.8078.47-or-later"],"how_to_check":"Open chrome://version and compare the version with 156.0.8078.47.\nOn managed machines, check the Chrome version through the device management console or software inventory.","fix":"Update Google Chrome to 156.0.8078.47 or later and relaunch the browser.","status":"open","published_at":"2026-10-20T22:19:05+00:00","first_seen_at":"2026-10-23T21:57:24+00:00","triaged_at":"2026-10-23T22:36:55+00:00","updated_at":"2026-10-23T22:36:55+00:00","category":"package","confidence":0.8,"triage":{"at":"2026-10-23T22:36:55Z","model":"claude-haiku-5-5","output":{"fix":"Update Google Chrome to 156.0.8078.47 or later and relaunch the browser.","reach":"internet","title":"Chrome: extensions memory corruption lets a web page read sandbox memory","impact":"medium","summary":"A crafted HTML page can corrupt memory in the Chrome Extensions component, letting an attacker read memory inside the browser sandbox. The sources say the impact is potential sandbox memory read, not code execution.","category":"package","who_cares":["chrome","windows","macos","linux"],"confidence":0.8,"needs_auth":"no","worst_case":"Attacker reads memory inside the browser sandbox via a crafted page","analyst_note":"","how_to_check":"Open chrome://version and compare the version with 156.0.8078.47.\nOn managed machines, check the Chrome version through the device management console or software inventory.","needs_analyst":false,"not_affected_if":["already-on-156.0.8078.47-or-later"],"user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000477,"input_tokens":2940,"output_tokens":366,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-113137':14A,17A '-2026':13A,16A '156.0.8078.47':69C 'allow':70C 'attack':40B,73C 'browser':45B 'chrome':1A,19A,20B,35B,66C 'chromium':86C 'code':58B 'compon':37B 'corrupt':4A,31B,61C 'craft':27B,83C 'cve':12A,15A 'execut':59B 'extens':2A,36B,63C 'googl':65C 'google':18A 'html':28B,84C 'impact':51B 'insid':43B,78C 'let':5A,38B 'linux':21B 'maco':22B 'medium':89C 'memori':3A,11A,32B,42B,55B,60C,77C 'packag':24B 'page':8A,29B,85C 'potenti':53B,75C 'prior':67C 'read':9A,41B,56B,76C 'remot':72C 'sandbox':10A,46B,54B,80C 'say':49B 'secur':87C 'sever':88C 'sourc':48B 'via':81C 'web':7A 'window':25B","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T22:19:05+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-113137","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113137","severity":null,"published_at":"2026-10-20T22:19:05+00:00","modified_at":"2026-10-21T16:17:18+00:00","first_seen_at":"2026-10-23T21:57:24+00:00","fetched_at":"2026-10-23T22:28:59+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}