cyfenced.com →

[ CVE-2026-113078 · Published 20 Oct 2026 ]

Vulnerability in Google Chrome

CVSS 9.6 EPSS <1%2 agency advisoriesNo fix listed yet

[ Why it matters ]Priority signals

  • Critical severity: CVSS 9.6

[ Description ]Official description

Improper input validation in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

  • CERT-FRCERTFR-2026-AVI-1357

    Multiple vulnerabilities in Google Chrome Translated from French

    Multiple vulnerabilities have been discovered in Google Chrome. They allow an attacker to cause a security problem not specified by the vendor.

    CVE-2026-113054CVE-2026-113084CVE-2026-113273+350 more CVEs
  • BSI CERT-BundWID-SEC-2026-4067

    Google Chrome: Multiple vulnerabilities Translated from German

    CVE-2026-113330CVE-2026-113082CVE-2026-113149+350 more CVEs

[ References ]References