Live › vulnerability › CVE-2026-113304
Go to dashboardA memory corruption bug in the GPU component of Google Chrome on Android lets a remote attacker read memory inside the browser sandbox when a victim opens a crafted HTML page. The flaw is fixed in Chrome 156.0.8078.47.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Devices running Google Chrome on Android older than are affected, and the attack needs a victim to load a crafted page. Managed fleets that pin Chrome versions or block browser updates should check their own version. Users on other browsers or on desktop platforms are not covered by this entry.
156.0.8078.47| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| google chrome | vendor | < 156.0.8078.47 | 156.0.8078.47 |
156.0.8078.47 or later156.0.8078.47 or later through Google PlayEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Memory corruption in GPU in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
This page as .md · .json · in your agent: get_signal("CVE-2026-113304")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.