Live › vulnerability › CVE-2026-113341
Go to dashboardA memory corruption bug in Skia, the graphics library in Google Chrome on Android, lets a remote attacker read memory inside the browser sandbox when the victim opens a crafted HTML page. The sources describe it as a potential read only, with no code execution stated.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Any Android device running Google Chrome older than is exposed, and the trigger is simply visiting a malicious or compromised web page. Teams that manage Android fleets or kiosks running Chrome should check versions; devices where Chrome is not installed or auto-updates are unlikely to stay behind for long.
156.0.8078.47| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| google chrome | vendor | < 156.0.8078.47 | 156.0.8078.47 |
156.0.8078.47 or later.156.0.8078.47 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Memory corruption in Skia in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
This page as .md · .json · in your agent: get_signal("CVE-2026-113341")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.