Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
5922 articles · 249468 vulns · 37/41 feeds (7d)
← Back to list
8.8
CVE-2026-113146PATCHED
google · chrome

CVE-2026-113146: Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially ex

Description

Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Affected Products

VendorProductVersions
googlechrome156.0.8078.47

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
googlechromecert_advisory90%

References

  • https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html
  • https://issues.chromium.org/issues/511325076

Related News (4 articles)

Tier B
CERT-FR23h ago
Multiples vulnérabilités dans Microsoft Edge (23 octobre 2026)
→ No new info (linked only)
Tier B
BSI Advisories2d ago
[NEU] [hoch] Google Chrome: Mehrere Schwachstellen
→ No new info (linked only)
Tier C
VulDB2d ago
CVE-2026-113146 | Google Chrome up to 155.0.8059.84 PerformanceAPIs memory corruption
→ No new info (linked only)
Tier B
CERT-FR2d ago
Multiples vulnérabilités dans Google Chrome (21 octobre 2026)
→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.18.8 HIGH
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CISA KEV❌ No
Actively exploited❌ No
Patch available
156.0.8078.47
CWECWE-119
PublishedOct 20, 2026
Last enriched2d agov2
Trending Score51
Source articles4
Independent3
Info Completeness9/14
Missing: epss, kev, exploit, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

NONECVE-2026-111497
Out-of-Bounds Write in Google Brotli Decoder
Trending: 55
HIGHCVE-2026-113141
CVE-2026-113141: Use after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arb
Trending: 51
HIGHCVE-2026-113147
CVE-2026-113147: Improper input validation in WebShare in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially e
Trending: 51
HIGHCVE-2026-113118
CVE-2026-113118: Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary c
Trending: 51
HIGHCVE-2026-113022
CVE-2026-113022: Memory corruption in PDFium in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arb
Trending: 51

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Oct 20, 2026
Discovered by ZDM
Oct 20, 2026
Updated: severity, affectedVersions, cvssEstimate
Oct 21, 2026
Patch Available
Oct 22, 2026

Version History

v2
Last enriched 2d ago
v2Tier C2d ago

Updated severity from HIGH to CRITICAL, added affected version 155.0.8059.84, and increased CVSS score from 8.8 to 9.8 based on critical rating.

severityaffectedVersionscvssEstimate
via VulDB
v13d ago

Initial creation