Live › vulnerability › CVE-2026-113201
Go to dashboardA memory corruption bug in the Google Lens component of Google Chrome, fixed in 156.0.8078.47, lets a remote attacker read memory inside the browser sandbox when a user visits a crafted HTML page. Chromium rates it Low severity, and NVD scores it medium at 6.5.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Any device running Google Chrome before is exposed when a user opens a crafted page. Exposure is by browser version, not by server configuration, so teams that only run servers can skip it unless they use Chrome on managed workstations.
156.0.8078.47| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| google chrome | vendor | < 156.0.8078.47 | 156.0.8078.47 |
google-chrome --version156.0.8078.47156.0.8078.47 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Memory corruption in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
This page as .md · .json · in your agent: get_signal("CVE-2026-113201")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.