CVE-2026-113138 in Chromeinfo

Summary

by MITRE • 10/21/2026

Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Responsible

Chrome

Reservation

10/20/2026

Disclosure

10/21/2026

Moderation

accepted

EPSS

0.00000

KEV

no

Activities

very low

Sources

Want to know what is going to be exploited?

We predict KEV entries!