Live › vulnerability › CVE-2026-113297
Go to dashboardGoogle Chrome's Ozone display and platform layer has an improper access control flaw before 156.0.8078.47. A remote attacker who gets a user to open a crafted HTML page can leak sensitive information.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Any device running Google Chrome older than 156.0.8078.47 is exposed when a user visits an attacker-controlled page. Managed fleets that pin Chrome or delay updates are the most likely to be behind. Devices already on 156.0.8078.47 or later are not affected.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| google chrome | vendor | < 156.0.8078.47 | 156.0.8078.47 |
google-chrome --version and compare it to 156.0.8078.47156.0.8078.47 or later and restart the browserEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Improper access control in Ozone in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)
This page as .md · .json · in your agent: get_signal("CVE-2026-113297")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.