Vulnerability in Google Chrome

[ Description ]Official description

Out of bounds read in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• CERT-FR21 Oct 2026CERTFR-2026-AVI-1357

  Multiple vulnerabilities in Google Chrome Translated from French

  Multiple vulnerabilities have been discovered in Google Chrome. They allow an attacker to cause a security problem not specified by the vendor.

  CVE-2026-113054CVE-2026-113084CVE-2026-113273+350 more CVEs
• BSI CERT-Bund20 Oct 2026WID-SEC-2026-4067

  Google Chrome: Multiple vulnerabilities Translated from German

  CVE-2026-113330CVE-2026-113082CVE-2026-113149+350 more CVEs

[ References ]References

• chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.htmlRelease NotesVendor Advisory
• issues.chromium.org/issues/552951369Permissions Required