Use After Free Vulnerability in Google Chrome Browser
CVE-2026-113227

8.8HIGH

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
20 October 2026

What is CVE-2026-113227?

An unauthorized memory handling issue within the editing component of Google Chrome allows attackers to exploit use after free vulnerabilities. This can lead to remote code execution facilitated through maliciously crafted HTML pages, posing significant security risks for users operating versions of the browser prior to 156.0.8078.47. User awareness and prompt updates are crucial to mitigate potential exploitation.

Affected Version(s)

Chrome 156.0.8078.47

References

https://chromereleases.googleblog.com/2026/10/stable-chan...
https://issues.chromium.org/issues/563021080

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.