{"id":"CVE-2026-113306","kind":"vulnerability","aliases":["CVE-2026-113306"],"related":[],"title":"Google Chrome: crafted web page can run code inside the browser sandbox","description":"Improper input validation in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)","summary":"Chrome versions before 156.0.8078.47 mishandle input in the Network component, so a malicious HTML page can run code inside the renderer sandbox. The sources score it high (CVSS 8.8) but note Chromium rates it Low severity, and sandbox code execution is one step short of full escape.","severity":"high","cvss":8.8,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"google chrome","fixed":["156.0.8078.47"],"affected":"< 156.0.8078.47","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["chrome","desktop-browsers","managed-endpoints","other","package"],"not_affected_if":["already-on-156.0.8078.47-or-later"],"how_to_check":"Open chrome://version in the browser and read the version number; anything below 156.0.8078.47 is affected.\nOn managed machines, check the Chrome version through the endpoint management console.","fix":"Update Google Chrome to 156.0.8078.47 or later and restart the browser.","status":"open","published_at":"2026-10-20T22:19:24+00:00","first_seen_at":"2026-10-23T21:57:24+00:00","triaged_at":"2026-10-23T22:35:13+00:00","updated_at":"2026-10-23T22:35:13+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-10-23T22:35:13Z","model":"claude-haiku-5-5","output":{"fix":"Update Google Chrome to 156.0.8078.47 or later and restart the browser.","reach":"internet","title":"Google Chrome: crafted web page can run code inside the browser sandbox","impact":"high","summary":"Chrome versions before 156.0.8078.47 mishandle input in the Network component, so a malicious HTML page can run code inside the renderer sandbox. The sources score it high (CVSS 8.8) but note Chromium rates it Low severity, and sandbox code execution is one step short of full escape.","category":"package","who_cares":["chrome","desktop-browsers","managed-endpoints"],"confidence":0.6,"needs_auth":"no","worst_case":"attacker runs code inside the browser sandbox after a user visits a page","analyst_note":"","how_to_check":"Open chrome://version in the browser and read the version number; anything below 156.0.8078.47 is affected.\nOn managed machines, check the Chrome version through the endpoint management console.","needs_analyst":false,"not_affected_if":["already-on-156.0.8078.47-or-later"],"user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"unknown"},"cost_usd":0.000498,"input_tokens":2944,"output_tokens":408,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-113306':15A,18A '-2026':14A,17A '156.0.8078.47':33B,87C '8.8':58B 'allow':88C 'arbitrari':95C 'attack':91C 'browser':11A,24B 'chrome':2A,20A,21B,30B,84C 'chromium':61B,105C 'code':8A,47B,68B,96C 'compon':39B 'craft':3A,102C 'cve':13A,16A 'cvss':57B 'desktop':23B 'desktop-brows':22B 'endpoint':27B 'escap':76B 'execut':69B,94C 'full':75B 'googl':1A,83C 'google':19A 'high':56B 'html':43B,103C 'improp':77C 'input':35B,78C 'insid':9A,48B,97C 'low':64B,108C 'malici':42B 'manag':26B 'managed-endpoint':25B 'mishandl':34B 'network':38B,81C 'note':60B 'one':71B 'packag':29B 'page':5A,44B,104C 'potenti':93C 'prior':85C 'rate':62B 'remot':90C 'render':50B 'run':7A,46B 'sandbox':12A,51B,67B,99C 'score':54B 'secur':106C 'sever':65B,107C 'short':73B 'sourc':53B 'step':72B 'valid':79C 'version':31B 'via':100C 'web':4A","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T22:19:24+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"134c704f-9b21-4f2e-91b3-4a467353bcc0","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-113306","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113306","severity":null,"published_at":"2026-10-20T22:19:24+00:00","modified_at":"2026-10-21T17:05:58+00:00","first_seen_at":"2026-10-23T21:57:24+00:00","fetched_at":"2026-10-23T22:28:59+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}