Live › vulnerability › CVE-2026-113151
Go to dashboardA flaw in the Actor component of Google Chrome before 156.0.8078.47 is an out-of-bounds memory read. A remote attacker can read memory inside the browser sandbox by getting a user to load a crafted HTML page.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Anyone running Google Chrome older than 156.0.8078.47 who visits web pages, including managed desktop fleets and developer machines. Systems on a current Chrome build, or with auto-update working, are not affected; the sources do not describe a server-side or configuration-dependent exposure.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| google chrome | vendor | < 156.0.8078.47 | 156.0.8078.47 |
google-chrome --version on Linux156.0.8078.47156.0.8078.47 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Out of bounds read in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
This page as .md · .json · in your agent: get_signal("CVE-2026-113151")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.