Live › vulnerability › CVE-2026-113178
Go to dashboardA memory corruption flaw in the Views component of Google Chrome on macOS lets a remote attacker potentially read memory inside the browser sandbox via a crafted HTML page. The sources rate it Chromium medium severity with a CVSS score of 6.5.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Any Mac with Google Chrome older than is affected when a user visits a malicious or compromised web page. Managed fleets that pin Chrome versions should confirm the update reached every machine. Systems where Chrome is not installed, or where it is already at or above the fixed version, are not affected.
156.0.8078.47| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| google chrome | vendor | < 156.0.8078.47 | 156.0.8078.47 |
chrome://version in Chrome on Mac and compare the version with 156.0.8078.47/Applications/Google Chrome.app/Contents/Info.plist (key CFBundleShortVersionString)156.0.8078.47 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Memory corruption in Views in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
This page as .md · .json · in your agent: get_signal("CVE-2026-113178")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.