Live › vulnerability › CVE-2026-113295
Go to dashboardA crafted HTML page can make Chrome on Windows read memory outside a buffer in the ANGLE graphics layer. The read happens inside the browser sandbox, so an attacker could learn memory contents that help a later exploit.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Any Windows machine running Google Chrome before is exposed when a user visits a malicious or compromised web page. Servers and non-Windows clients are not named in the sources as affected.
156.0.8078.47| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| google chrome | vendor | < 156.0.8078.47 | 156.0.8078.47 |
chrome://version in the browser and compare the version with 156.0.8078.47.156.0.8078.47 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Out of bounds read in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)
This page as .md · .json · in your agent: get_signal("CVE-2026-113295")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.