Live › vulnerability › CVE-2026-113142
Go to dashboardA memory corruption bug in Chrome's Extensions component lets a remote attacker who serves a crafted HTML page read memory inside the browser sandbox. The sources describe it as a read, with Chromium rating it Medium severity.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Anyone running Google Chrome older than 156.0.8078.47 on desktop, since any browsing of a malicious page can trigger the flaw. Teams that only manage Chrome through an auto-updating enterprise policy should confirm the fleet has actually moved to the fixed build.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| google chrome | vendor | < 156.0.8078.47 | 156.0.8078.47 |
chrome://version and compare the version against 156.0.8078.47156.0.8078.47 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
This page as .md · .json · in your agent: get_signal("CVE-2026-113142")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.