Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
5922 articles · 249468 vulns · 37/41 feeds (7d)
← Back to list
8.8
CVE-2026-113147PATCHED
google · chrome

CVE-2026-113147: Improper input validation in WebShare in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially e

Description

Improper input validation in WebShare in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Affected Products

VendorProductVersions
googlechrome156.0.8078.47

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
googlechromecert_advisory90%

References

  • https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html
  • https://issues.chromium.org/issues/501531546

Related News (4 articles)

Tier B
CERT-FR23h ago
Multiples vulnérabilités dans Microsoft Edge (23 octobre 2026)
→ No new info (linked only)
Tier B
BSI Advisories2d ago
[NEU] [hoch] Google Chrome: Mehrere Schwachstellen
→ No new info (linked only)
Tier C
VulDB2d ago
CVE-2026-113147 | Google Chrome up to 155.0.8059.84 WebShare input validation
→ No new info (linked only)
Tier B
CERT-FR2d ago
Multiples vulnérabilités dans Google Chrome (21 octobre 2026)
→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.18.8 HIGH
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CISA KEV❌ No
Actively exploited❌ No
Patch available
156.0.8078.47
CWECWE-20
PublishedOct 20, 2026
Last enriched2d agov2
Trending Score51
Source articles4
Independent3
Info Completeness9/14
Missing: epss, kev, exploit, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

NONECVE-2026-111497
Out-of-Bounds Write in Google Brotli Decoder
Trending: 55
HIGHCVE-2026-113141
CVE-2026-113141: Use after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arb
Trending: 51
HIGHCVE-2026-113146
CVE-2026-113146: Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially ex
Trending: 51
HIGHCVE-2026-113118
CVE-2026-113118: Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary c
Trending: 51
HIGHCVE-2026-113022
CVE-2026-113022: Memory corruption in PDFium in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arb
Trending: 51

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Oct 20, 2026
Discovered by ZDM
Oct 20, 2026
Updated: severity, affectedVersions
Oct 21, 2026
Patch Available
Oct 22, 2026

Version History

v2
Last enriched 2d ago
v2Tier C2d ago

Severity corrected from HIGH to CRITICAL; affected version expanded to include Chrome 155.0.8059.84

severityaffectedVersions
via VulDB
v13d ago

Initial creation