{"id":"CVE-2026-113224","kind":"vulnerability","aliases":["CVE-2026-113224"],"related":[],"title":"Chrome on Android: WebAppInstalls memory corruption leaks sandboxed memory","description":"Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","summary":"A memory corruption bug in the WebAppInstalls component of Google Chrome on Android lets a crafted HTML page read memory inside the browser sandbox. The sources describe it as a read, not code execution, and rate it Medium severity with CVSS 6.5.","severity":"medium","cvss":6.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["android","chrome","mobile-users","other"],"not_affected_if":["chrome-updated"],"how_to_check":"- Check the Chrome version on Android devices under Settings > About Chrome\n- Confirm whether it is below `156.0.8078.47`","fix":"- Update Google Chrome on Android to `156.0.8078.47` or later","status":"open","published_at":"2026-10-20T22:19:15+00:00","first_seen_at":"2026-10-23T21:57:24+00:00","triaged_at":"2026-10-25T03:53:01+00:00","updated_at":"2026-10-25T03:53:01+00:00","category":"other","confidence":0.6,"triage":{"at":"2026-10-25T03:53:01Z","model":"claude-haiku-5-5","output":{"fix":"- Update Google Chrome on Android to `156.0.8078.47` or later","reach":"internet","title":"Chrome on Android: WebAppInstalls memory corruption leaks sandboxed memory","impact":"low","summary":"A memory corruption bug in the WebAppInstalls component of Google Chrome on Android lets a crafted HTML page read memory inside the browser sandbox. The sources describe it as a read, not code execution, and rate it Medium severity with CVSS 6.5.","category":"other","nicknames":[],"who_cares":["android","chrome","mobile-users"],"confidence":0.6,"needs_auth":"no","worst_case":"Browser sandbox memory readable by a malicious web page","analyst_note":"","how_to_check":"- Check the Chrome version on Android devices under Settings > About Chrome\n- Confirm whether it is below `156.0.8078.47`","needs_analyst":false,"not_affected_if":["chrome-updated"],"who_is_affected":"Anyone running Chrome on Android before `156.0.8078.47`, and browser users who open untrusted web pages. Server-side teams and apps that do not ship or manage Chrome on Android are not exposed through this flaw. The sources do not say whether managed or WebView builds are affected.","user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"medium"},"cost_usd":0.000568,"input_tokens":3314,"output_tokens":474,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-113224':12A,15A '-2026':11A,14A '156.0.8078.47':75C '6.5':62B 'allow':76C 'android':3A,16B,33B,72C 'attack':79C 'browser':43B 'bug':24B 'chrome':1A,17B,31B,69C 'chromium':92C 'code':53B 'compon':28B 'corrupt':6A,23B,64C 'craft':36B,89C 'cve':10A,13A 'cvss':61B 'describ':47B 'execut':54B 'googl':30B,68C 'html':37B,90C 'insid':41B,84C 'leak':7A 'let':34B 'medium':58B,95C 'memori':5A,9A,22B,40B,63C,83C 'mobil':19B 'mobile-us':18B 'page':38B,91C 'potenti':81C 'prior':73C 'rate':56B 'read':39B,51B,82C 'remot':78C 'sandbox':8A,44B,86C 'secur':93C 'sever':59B,94C 'sourc':46B 'user':20B 'via':87C 'webappinstal':4A,27B,66C","nicknames":[],"mitigations":[],"who_affected":"Anyone running Chrome on Android before `156.0.8078.47`, and browser users who open untrusted web pages. Server-side teams and apps that do not ship or manage Chrome on Android are not exposed through this flaw. The sources do not say whether managed or WebView builds are affected.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T22:19:15+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss_by":"134c704f-9b21-4f2e-91b3-4a467353bcc0","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-113224","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113224","severity":null,"published_at":"2026-10-20T22:19:15+00:00","modified_at":"2026-10-21T16:17:20+00:00","first_seen_at":"2026-10-23T21:57:24+00:00","fetched_at":"2026-10-23T22:28:59+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}