Live › vulnerability › CVE-2026-113212
Go to dashboardA memory corruption bug in the PDF component of Google Chrome before 156.0.8078.47 can be triggered by a crafted HTML page. Per the Chromium advisory summary, a remote attacker may use it to potentially escape or compromise the browser; the exact outcome is not stated in the sources.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Any user or machine running Google Chrome before 156.0.8078.47 who opens untrusted web pages is potentially exposed, since the trigger is a crafted HTML page. Machines on managed Chrome versions that are already at or above the fixed release can skip it. The sources do not say whether Chromium-based browsers other than Chrome are affected.
No product ranges from the sources yet.
chrome://version in Chrome and compare the version with 156.0.8078.47156.0.8078.47 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Memory corruption in PDF in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially via a crafted HTML page. (Chromium security severity: High)
This page as .md · .json · in your agent: get_signal("CVE-2026-113212")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.