Remote Code Execution Risk in Google Chrome by Google
CVE-2026-113130

8.8HIGH

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
20 October 2026

What is CVE-2026-113130?

A use after free vulnerability exists in the Actor component of Google Chrome, prior to version 156.0.8078.47. This flaw enables remote attackers to execute arbitrary code within the browser's sandbox environment through specially crafted HTML content. Users of affected versions are urged to update their browsers promptly to mitigate potential risks.

Affected Version(s)

Chrome 156.0.8078.47

References

https://chromereleases.googleblog.com/2026/10/stable-chan...
https://issues.chromium.org/issues/563004214

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.