Improper Input Validation in Google Chrome Loader
CVE-2026-113294

8.8HIGH

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
20 October 2026

What is CVE-2026-113294?

A flaw in the Loader component of Google Chrome enables remote attackers to potentially execute arbitrary code inside the sandbox environment through specially crafted HTML files. This may lead to significant security risks, where malicious content could exploit the browser's capabilities, thereby compromising user security.

Affected Version(s)

Chrome 156.0.8078.47

References

https://chromereleases.googleblog.com/2026/10/stable-chan...
https://issues.chromium.org/issues/563015337

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.