Live › vulnerability › CVE-2026-113237
Go to dashboardA memory corruption flaw in Chromoting, Chrome's remote desktop component, can be triggered by a crafted HTML page. A remote attacker can read memory inside the browser sandbox.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Any machine running Google Chrome before is affected, since the flaw is triggered by visiting a crafted HTML page in the browser. Teams that manage browsers on developer or employee machines should update them; server-only environments without a desktop browser are unlikely to be exposed.
156.0.8078.47| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| google chrome | vendor | < 156.0.8078.47 | 156.0.8078.47 |
chrome://version and read the Chrome version; it should be 156.0.8078.47 or later156.0.8078.47 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Memory corruption in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
This page as .md · .json · in your agent: get_signal("CVE-2026-113237")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.