Live › vulnerability › CVE-2026-113224
Go to dashboardA memory corruption bug in the WebAppInstalls component of Google Chrome on Android lets a crafted HTML page read memory inside the browser sandbox. The sources describe it as a read, not code execution, and rate it Medium severity with CVSS 6.5.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Anyone running Chrome on Android before 156.0.8078.47, and browser users who open untrusted web pages. Server-side teams and apps that do not ship or manage Chrome on Android are not exposed through this flaw. The sources do not say whether managed or WebView builds are affected.
No product ranges from the sources yet.
156.0.8078.47156.0.8078.47 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
This page as .md · .json · in your agent: get_signal("CVE-2026-113224")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.