Live › vulnerability › CVE-2026-113144
Go to dashboardA memory corruption bug in the Speech component of Google Chrome before 156.0.8078.47 lets a remote attacker read memory inside the browser sandbox. The attack is triggered by a crafted HTML page that the user visits.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Any device running Google Chrome older than is exposed when a user opens a malicious page. Managed fleets should check browser versions across endpoints. Teams whose users do not run Chrome can skip it.
156.0.8078.47| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| google chrome | vendor | < 156.0.8078.47 | 156.0.8078.47 |
google-chrome --version on Linux156.0.8078.47156.0.8078.47 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Memory corruption in Speech in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
This page as .md · .json · in your agent: get_signal("CVE-2026-113144")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.