CVE-2026-113341

CVSS 3.1: 6.5 medium
EPSS: —
Published: Oct 20, 2026 · 10d ago
Modified: Oct 22, 2026

Analyze CVE-2026-113341 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Memory corruption in Skia in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Vendors: google

Products: chrome

Weakness: CWE-119

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (—)

In the news

2 stories

Chrome 156 patches 353 flaws, six of them critical

Fixed builds are 156.0.8078.47 on Linux and 156.0.8078.47 or .48 on Windows and Mac; Google does not report active attacks.

Cyber Security NewsOct 21, 14:07 UTC · 9d agoVulnerabilityCVE-2026-113341 CVE-2026-113279 CVE-2026-113072+42 · 1 read

Chrome 156 fixes 353 vulnerabilities, six of them critical

Linux builds are 156.0.8078.47 and Windows and macOS builds are 156.0.8078.47 or .48; exploitation is not addressed.

GBHackersOct 21, 11:26 UTC · 9d agoVulnerabilityCVE-2026-113341 CVE-2026-113279 CVE-2026-113072+272 · 1 read