Live › vulnerability › CVE-2026-113157
Go to dashboardA flaw in ANGLE, the graphics translation layer in Google Chrome on Windows, lets a remote attacker leak sensitive information. The attack is triggered by a crafted HTML page that a user visits.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Any Windows machine running Google Chrome before is exposed, and a user only needs to load the attacker's page. Managed fleets that already auto-update to current Chrome are covered once the update lands. Chrome on other operating systems is not named in the sources.
156.0.8078.47| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| google chrome | vendor | < 156.0.8078.47 | 156.0.8078.47 |
chrome --version; versions below 156.0.8078.47 are affected.156.0.8078.47 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Information leak in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)
This page as .md · .json · in your agent: get_signal("CVE-2026-113157")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.