Improper Input Validation in Google Chrome's Chromoting Feature
CVE-2026-113063

8.8HIGH

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
20 October 2026

What is CVE-2026-113063?

A security issue in the Chromoting feature of Google Chrome allows for improper input validation, enabling remote attackers to potentially execute arbitrary code within the browser's sandbox via a specially crafted HTML page. This vulnerability presents a risk to users operating versions of Google Chrome prior to 156.0.8078.47. To maintain security, users are advised to stay updated with the latest browser versions.

Affected Version(s)

Chrome 156.0.8078.47

References

https://chromereleases.googleblog.com/2026/10/stable-chan...
https://issues.chromium.org/issues/562960821

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.