Live › vulnerability › CVE-2026-113196
Go to dashboardGoogle Chrome for iOS before 156.0.8078.47 has an improper access control flaw in its mobile component. A remote attacker can serve a crafted HTML page to bypass the web origin policy, which can expose data from other sites.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Users and teams running Chrome on iOS older than . Exposure comes from browsing untrusted or attacker-controlled pages in that browser. Devices on newer builds, or teams with no iOS Chrome installs, can skip it.
156.0.8078.47No product ranges from the sources yet.
unknown on managed devices if the sources do not say how.156.0.8078.47 or later through the App Store.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Improper access control in Mobile in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
This page as .md · .json · in your agent: get_signal("CVE-2026-113196")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.