CVE-2026-113244

Fixed in a distro release EPSS <1%CVSS 8.8

Improper input validation in UI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

Published 2026-10-20 · CVE record · OSV

Products: Google Chrome

Distro releases