Live › vulnerability › CVE-2026-113329
Go to dashboardA out-of-bounds read in the Installer component of Google Chrome on macOS lets a remote attacker read memory inside the sandbox when the victim opens a crafted HTML page. The sources say the flaw is in the browser, rated Chromium security severity Medium, with a CVSS score of 6.5.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Any Mac running Google Chrome before is affected, since the flaw is triggered by a visited web page. Managed fleets that pin older Chrome builds are the ones most likely to stay exposed. unknown whether the sources describe any configuration that changes exposure.
156.0.8078.47| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| google chrome | vendor | < 156.0.8078.47 | 156.0.8078.47 |
chrome --version or check Chrome's About page and compare against 156.0.8078.47156.0.8078.47 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Out of bounds read in Installer in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
This page as .md · .json · in your agent: get_signal("CVE-2026-113329")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.