{"schema_version":"2","view":"grouped","data":[{"id":53375,"cve_ids":["CVE-2026-113022"],"payload":{"kind":"advisory","title":"CVE-2026-113022","summary":"Memory corruption in PDFium in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113022","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113022","aliases":["CVE-2026-113022"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-23T12:51:16.340Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/494352583"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113022","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-22T23:03:57.093475Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-23T12:51:16.340Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:01:59.021Z"}}},"related_cves":[{"value":"CVE-2026-113022","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:7d3cd1ad-8c88-4884-a5d3-bd49b5f0bca2","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113022","advisory_id":"7d3cd1ad-8c88-4884-a5d3-bd49b5f0bca2","event_types":["advisory"],"published_at":"2026-10-25T14:52:53.150641+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:01:59.021+00:00","detail_url":"/advisories/advisory%3A7d3cd1ad-8c88-4884-a5d3-bd49b5f0bca2","group":{"id":"advisory:7d3cd1ad-8c88-4884-a5d3-bd49b5f0bca2","revision":1,"primary_event_id":52904,"change":"published","superseded_by":[],"changed":{"id":52904,"cve_ids":["CVE-2026-113022"],"payload":{"kind":"advisory","title":"CVE-2026-113022","summary":"Memory corruption in PDFium in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113022","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113022","aliases":["CVE-2026-113022"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-23T12:51:16.340Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/494352583"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113022","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-22T23:03:57.093475Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-23T12:51:16.340Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:01:59.021Z"}}},"related_cves":[{"value":"CVE-2026-113022","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:7d3cd1ad-8c88-4884-a5d3-bd49b5f0bca2","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113022","advisory_id":"7d3cd1ad-8c88-4884-a5d3-bd49b5f0bca2","event_types":["advisory"],"published_at":"2026-10-25T14:52:53.150641+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:01:59.021+00:00","detail_url":"/events/52904"},"members":[{"id":52904,"cve_ids":["CVE-2026-113022"],"payload":{"kind":"advisory","title":"CVE-2026-113022","summary":"Memory corruption in PDFium in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113022","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113022","aliases":["CVE-2026-113022"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-23T12:51:16.340Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/494352583"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113022","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-22T23:03:57.093475Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-23T12:51:16.340Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:01:59.021Z"}}},"related_cves":[{"value":"CVE-2026-113022","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:7d3cd1ad-8c88-4884-a5d3-bd49b5f0bca2","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113022","advisory_id":"7d3cd1ad-8c88-4884-a5d3-bd49b5f0bca2","event_types":["advisory"],"published_at":"2026-10-25T14:52:53.150641+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:01:59.021+00:00","detail_url":"/events/52904"}]}},{"id":53374,"cve_ids":["CVE-2026-112995"],"payload":{"kind":"advisory","title":"CVE-2026-112995","summary":"Use after free in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-112995","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-112995","aliases":["CVE-2026-112995"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-23T12:50:39.242Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/514447367"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-112995","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-22T23:04:52.463573Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-23T12:50:39.242Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:15.935Z"}}},"related_cves":[{"value":"CVE-2026-112995","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:df866331-309e-4419-8cfc-250bc89cb58d","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-112995","advisory_id":"df866331-309e-4419-8cfc-250bc89cb58d","event_types":["advisory"],"published_at":"2026-10-25T14:52:52.493512+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:15.935+00:00","detail_url":"/advisories/advisory%3Adf866331-309e-4419-8cfc-250bc89cb58d","group":{"id":"advisory:df866331-309e-4419-8cfc-250bc89cb58d","revision":1,"primary_event_id":52903,"change":"published","superseded_by":[],"changed":{"id":52903,"cve_ids":["CVE-2026-112995"],"payload":{"kind":"advisory","title":"CVE-2026-112995","summary":"Use after free in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-112995","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-112995","aliases":["CVE-2026-112995"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-23T12:50:39.242Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/514447367"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-112995","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-22T23:04:52.463573Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-23T12:50:39.242Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:15.935Z"}}},"related_cves":[{"value":"CVE-2026-112995","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:df866331-309e-4419-8cfc-250bc89cb58d","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-112995","advisory_id":"df866331-309e-4419-8cfc-250bc89cb58d","event_types":["advisory"],"published_at":"2026-10-25T14:52:52.493512+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:15.935+00:00","detail_url":"/events/52903"},"members":[{"id":52903,"cve_ids":["CVE-2026-112995"],"payload":{"kind":"advisory","title":"CVE-2026-112995","summary":"Use after free in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-112995","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-112995","aliases":["CVE-2026-112995"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-23T12:50:39.242Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/514447367"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-112995","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-22T23:04:52.463573Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-23T12:50:39.242Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:15.935Z"}}},"related_cves":[{"value":"CVE-2026-112995","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:df866331-309e-4419-8cfc-250bc89cb58d","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-112995","advisory_id":"df866331-309e-4419-8cfc-250bc89cb58d","event_types":["advisory"],"published_at":"2026-10-25T14:52:52.493512+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:15.935+00:00","detail_url":"/events/52903"}]}},{"id":53373,"cve_ids":["CVE-2026-112994"],"payload":{"kind":"advisory","title":"CVE-2026-112994","summary":"Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)","evidence":"cve:CVE-2026-112994","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-112994","aliases":["CVE-2026-112994"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-23T12:50:59.676Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562962437"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-112994","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-22T23:04:44.930190Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-23T12:50:59.676Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:50.344Z"}}},"related_cves":[{"value":"CVE-2026-112994","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:1ebbfab2-5cc9-49cf-9f0f-202d9b9d3dc6","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-112994","advisory_id":"1ebbfab2-5cc9-49cf-9f0f-202d9b9d3dc6","event_types":["advisory"],"published_at":"2026-10-25T14:52:51.830753+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:50.344+00:00","detail_url":"/advisories/advisory%3A1ebbfab2-5cc9-49cf-9f0f-202d9b9d3dc6","group":{"id":"advisory:1ebbfab2-5cc9-49cf-9f0f-202d9b9d3dc6","revision":1,"primary_event_id":52902,"change":"published","superseded_by":[],"changed":{"id":52902,"cve_ids":["CVE-2026-112994"],"payload":{"kind":"advisory","title":"CVE-2026-112994","summary":"Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)","evidence":"cve:CVE-2026-112994","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-112994","aliases":["CVE-2026-112994"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-23T12:50:59.676Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562962437"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-112994","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-22T23:04:44.930190Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-23T12:50:59.676Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:50.344Z"}}},"related_cves":[{"value":"CVE-2026-112994","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:1ebbfab2-5cc9-49cf-9f0f-202d9b9d3dc6","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-112994","advisory_id":"1ebbfab2-5cc9-49cf-9f0f-202d9b9d3dc6","event_types":["advisory"],"published_at":"2026-10-25T14:52:51.830753+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:50.344+00:00","detail_url":"/events/52902"},"members":[{"id":52902,"cve_ids":["CVE-2026-112994"],"payload":{"kind":"advisory","title":"CVE-2026-112994","summary":"Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)","evidence":"cve:CVE-2026-112994","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-112994","aliases":["CVE-2026-112994"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-23T12:50:59.676Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562962437"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-112994","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-22T23:04:44.930190Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-23T12:50:59.676Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:50.344Z"}}},"related_cves":[{"value":"CVE-2026-112994","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:1ebbfab2-5cc9-49cf-9f0f-202d9b9d3dc6","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-112994","advisory_id":"1ebbfab2-5cc9-49cf-9f0f-202d9b9d3dc6","event_types":["advisory"],"published_at":"2026-10-25T14:52:51.830753+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:50.344+00:00","detail_url":"/events/52902"}]}},{"id":52977,"cve_ids":["CVE-2026-113342"],"payload":{"kind":"advisory","title":"CVE-2026-113342","summary":"Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113342","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113342","aliases":["CVE-2026-113342"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:00.680Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562024413"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113342","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:00.680Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:31.718Z"}}},"related_cves":[{"value":"CVE-2026-113342","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a2d0ea48-693d-4aaa-849f-d4fe6c275333","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113342","advisory_id":"a2d0ea48-693d-4aaa-849f-d4fe6c275333","event_types":["advisory"],"published_at":"2026-10-25T14:46:29.442472+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:31.718+00:00","detail_url":"/advisories/advisory%3Aa2d0ea48-693d-4aaa-849f-d4fe6c275333","group":{"id":"advisory:a2d0ea48-693d-4aaa-849f-d4fe6c275333","revision":1,"primary_event_id":52506,"change":"published","superseded_by":[],"changed":{"id":52506,"cve_ids":["CVE-2026-113342"],"payload":{"kind":"advisory","title":"CVE-2026-113342","summary":"Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113342","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113342","aliases":["CVE-2026-113342"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:00.680Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562024413"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113342","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:00.680Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:31.718Z"}}},"related_cves":[{"value":"CVE-2026-113342","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a2d0ea48-693d-4aaa-849f-d4fe6c275333","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113342","advisory_id":"a2d0ea48-693d-4aaa-849f-d4fe6c275333","event_types":["advisory"],"published_at":"2026-10-25T14:46:29.442472+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:31.718+00:00","detail_url":"/events/52506"},"members":[{"id":52506,"cve_ids":["CVE-2026-113342"],"payload":{"kind":"advisory","title":"CVE-2026-113342","summary":"Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113342","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113342","aliases":["CVE-2026-113342"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:00.680Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562024413"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113342","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:00.680Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:31.718Z"}}},"related_cves":[{"value":"CVE-2026-113342","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a2d0ea48-693d-4aaa-849f-d4fe6c275333","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113342","advisory_id":"a2d0ea48-693d-4aaa-849f-d4fe6c275333","event_types":["advisory"],"published_at":"2026-10-25T14:46:29.442472+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:31.718+00:00","detail_url":"/events/52506"}]}},{"id":52976,"cve_ids":["CVE-2026-113336"],"payload":{"kind":"advisory","title":"CVE-2026-113336","summary":"Memory corruption in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)","evidence":"cve:CVE-2026-113336","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113336","aliases":["CVE-2026-113336"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:09.918Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/569286604"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113336","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:09.918Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:01:56.282Z"}}},"related_cves":[{"value":"CVE-2026-113336","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e3c58189-e207-49d7-b002-5ac0c0c15238","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113336","advisory_id":"e3c58189-e207-49d7-b002-5ac0c0c15238","event_types":["advisory"],"published_at":"2026-10-25T14:46:28.616665+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:01:56.282+00:00","detail_url":"/advisories/advisory%3Ae3c58189-e207-49d7-b002-5ac0c0c15238","group":{"id":"advisory:e3c58189-e207-49d7-b002-5ac0c0c15238","revision":1,"primary_event_id":52505,"change":"published","superseded_by":[],"changed":{"id":52505,"cve_ids":["CVE-2026-113336"],"payload":{"kind":"advisory","title":"CVE-2026-113336","summary":"Memory corruption in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)","evidence":"cve:CVE-2026-113336","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113336","aliases":["CVE-2026-113336"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:09.918Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/569286604"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113336","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:09.918Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:01:56.282Z"}}},"related_cves":[{"value":"CVE-2026-113336","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e3c58189-e207-49d7-b002-5ac0c0c15238","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113336","advisory_id":"e3c58189-e207-49d7-b002-5ac0c0c15238","event_types":["advisory"],"published_at":"2026-10-25T14:46:28.616665+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:01:56.282+00:00","detail_url":"/events/52505"},"members":[{"id":52505,"cve_ids":["CVE-2026-113336"],"payload":{"kind":"advisory","title":"CVE-2026-113336","summary":"Memory corruption in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)","evidence":"cve:CVE-2026-113336","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113336","aliases":["CVE-2026-113336"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:09.918Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/569286604"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113336","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:09.918Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:01:56.282Z"}}},"related_cves":[{"value":"CVE-2026-113336","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e3c58189-e207-49d7-b002-5ac0c0c15238","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113336","advisory_id":"e3c58189-e207-49d7-b002-5ac0c0c15238","event_types":["advisory"],"published_at":"2026-10-25T14:46:28.616665+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:01:56.282+00:00","detail_url":"/events/52505"}]}},{"id":52975,"cve_ids":["CVE-2026-113331"],"payload":{"kind":"advisory","title":"CVE-2026-113331","summary":"Memory corruption in Controls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)","evidence":"cve:CVE-2026-113331","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113331","aliases":["CVE-2026-113331"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:43.619Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562993085"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113331","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:43.619Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:50.974Z"}}},"related_cves":[{"value":"CVE-2026-113331","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:30f92c8e-afd3-4ca6-bc9b-b8432ef4077b","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113331","advisory_id":"30f92c8e-afd3-4ca6-bc9b-b8432ef4077b","event_types":["advisory"],"published_at":"2026-10-25T14:46:27.967821+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:50.974+00:00","detail_url":"/advisories/advisory%3A30f92c8e-afd3-4ca6-bc9b-b8432ef4077b","group":{"id":"advisory:30f92c8e-afd3-4ca6-bc9b-b8432ef4077b","revision":1,"primary_event_id":52504,"change":"published","superseded_by":[],"changed":{"id":52504,"cve_ids":["CVE-2026-113331"],"payload":{"kind":"advisory","title":"CVE-2026-113331","summary":"Memory corruption in Controls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)","evidence":"cve:CVE-2026-113331","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113331","aliases":["CVE-2026-113331"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:43.619Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562993085"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113331","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:43.619Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:50.974Z"}}},"related_cves":[{"value":"CVE-2026-113331","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:30f92c8e-afd3-4ca6-bc9b-b8432ef4077b","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113331","advisory_id":"30f92c8e-afd3-4ca6-bc9b-b8432ef4077b","event_types":["advisory"],"published_at":"2026-10-25T14:46:27.967821+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:50.974+00:00","detail_url":"/events/52504"},"members":[{"id":52504,"cve_ids":["CVE-2026-113331"],"payload":{"kind":"advisory","title":"CVE-2026-113331","summary":"Memory corruption in Controls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)","evidence":"cve:CVE-2026-113331","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113331","aliases":["CVE-2026-113331"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:43.619Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562993085"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113331","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:43.619Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:50.974Z"}}},"related_cves":[{"value":"CVE-2026-113331","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:30f92c8e-afd3-4ca6-bc9b-b8432ef4077b","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113331","advisory_id":"30f92c8e-afd3-4ca6-bc9b-b8432ef4077b","event_types":["advisory"],"published_at":"2026-10-25T14:46:27.967821+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:50.974+00:00","detail_url":"/events/52504"}]}},{"id":52974,"cve_ids":["CVE-2026-113328"],"payload":{"kind":"advisory","title":"CVE-2026-113328","summary":"Improper input validation in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113328","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113328","aliases":["CVE-2026-113328"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:26.919Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/518055862"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113328","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:26.919Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:18.430Z"}}},"related_cves":[{"value":"CVE-2026-113328","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:454e3a82-64bf-40b9-867a-d9dfa86efe64","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113328","advisory_id":"454e3a82-64bf-40b9-867a-d9dfa86efe64","event_types":["advisory"],"published_at":"2026-10-25T14:46:27.319297+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:18.43+00:00","detail_url":"/advisories/advisory%3A454e3a82-64bf-40b9-867a-d9dfa86efe64","group":{"id":"advisory:454e3a82-64bf-40b9-867a-d9dfa86efe64","revision":1,"primary_event_id":52503,"change":"published","superseded_by":[],"changed":{"id":52503,"cve_ids":["CVE-2026-113328"],"payload":{"kind":"advisory","title":"CVE-2026-113328","summary":"Improper input validation in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113328","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113328","aliases":["CVE-2026-113328"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:26.919Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/518055862"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113328","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:26.919Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:18.430Z"}}},"related_cves":[{"value":"CVE-2026-113328","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:454e3a82-64bf-40b9-867a-d9dfa86efe64","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113328","advisory_id":"454e3a82-64bf-40b9-867a-d9dfa86efe64","event_types":["advisory"],"published_at":"2026-10-25T14:46:27.319297+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:18.43+00:00","detail_url":"/events/52503"},"members":[{"id":52503,"cve_ids":["CVE-2026-113328"],"payload":{"kind":"advisory","title":"CVE-2026-113328","summary":"Improper input validation in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113328","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113328","aliases":["CVE-2026-113328"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:26.919Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/518055862"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113328","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:26.919Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:18.430Z"}}},"related_cves":[{"value":"CVE-2026-113328","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:454e3a82-64bf-40b9-867a-d9dfa86efe64","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113328","advisory_id":"454e3a82-64bf-40b9-867a-d9dfa86efe64","event_types":["advisory"],"published_at":"2026-10-25T14:46:27.319297+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:18.43+00:00","detail_url":"/events/52503"}]}},{"id":52973,"cve_ids":["CVE-2026-113283"],"payload":{"kind":"advisory","title":"CVE-2026-113283","summary":"Memory corruption in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113283","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113283","aliases":["CVE-2026-113283"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:08.357Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/502085234"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113283","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:08.357Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:07.161Z"}}},"related_cves":[{"value":"CVE-2026-113283","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:317eec40-5bf9-40ce-b849-8c2a2ad6cef7","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113283","advisory_id":"317eec40-5bf9-40ce-b849-8c2a2ad6cef7","event_types":["advisory"],"published_at":"2026-10-25T14:46:26.702758+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:07.161+00:00","detail_url":"/advisories/advisory%3A317eec40-5bf9-40ce-b849-8c2a2ad6cef7","group":{"id":"advisory:317eec40-5bf9-40ce-b849-8c2a2ad6cef7","revision":1,"primary_event_id":52502,"change":"published","superseded_by":[],"changed":{"id":52502,"cve_ids":["CVE-2026-113283"],"payload":{"kind":"advisory","title":"CVE-2026-113283","summary":"Memory corruption in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113283","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113283","aliases":["CVE-2026-113283"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:08.357Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/502085234"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113283","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:08.357Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:07.161Z"}}},"related_cves":[{"value":"CVE-2026-113283","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:317eec40-5bf9-40ce-b849-8c2a2ad6cef7","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113283","advisory_id":"317eec40-5bf9-40ce-b849-8c2a2ad6cef7","event_types":["advisory"],"published_at":"2026-10-25T14:46:26.702758+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:07.161+00:00","detail_url":"/events/52502"},"members":[{"id":52502,"cve_ids":["CVE-2026-113283"],"payload":{"kind":"advisory","title":"CVE-2026-113283","summary":"Memory corruption in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113283","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113283","aliases":["CVE-2026-113283"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:08.357Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/502085234"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113283","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:08.357Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:07.161Z"}}},"related_cves":[{"value":"CVE-2026-113283","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:317eec40-5bf9-40ce-b849-8c2a2ad6cef7","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113283","advisory_id":"317eec40-5bf9-40ce-b849-8c2a2ad6cef7","event_types":["advisory"],"published_at":"2026-10-25T14:46:26.702758+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:07.161+00:00","detail_url":"/events/52502"}]}},{"id":52972,"cve_ids":["CVE-2026-113300"],"payload":{"kind":"advisory","title":"CVE-2026-113300","summary":"Out of bounds write in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)","evidence":"cve:CVE-2026-113300","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113300","aliases":["CVE-2026-113300"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:18.259Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/513468106"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113300","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:18.259Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:39.876Z"}}},"related_cves":[{"value":"CVE-2026-113300","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:798304f0-883b-479c-9df8-5fbafeb50687","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113300","advisory_id":"798304f0-883b-479c-9df8-5fbafeb50687","event_types":["advisory"],"published_at":"2026-10-25T14:46:25.697454+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:39.876+00:00","detail_url":"/advisories/advisory%3A798304f0-883b-479c-9df8-5fbafeb50687","group":{"id":"advisory:798304f0-883b-479c-9df8-5fbafeb50687","revision":1,"primary_event_id":52501,"change":"published","superseded_by":[],"changed":{"id":52501,"cve_ids":["CVE-2026-113300"],"payload":{"kind":"advisory","title":"CVE-2026-113300","summary":"Out of bounds write in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)","evidence":"cve:CVE-2026-113300","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113300","aliases":["CVE-2026-113300"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:18.259Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/513468106"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113300","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:18.259Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:39.876Z"}}},"related_cves":[{"value":"CVE-2026-113300","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:798304f0-883b-479c-9df8-5fbafeb50687","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113300","advisory_id":"798304f0-883b-479c-9df8-5fbafeb50687","event_types":["advisory"],"published_at":"2026-10-25T14:46:25.697454+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:39.876+00:00","detail_url":"/events/52501"},"members":[{"id":52501,"cve_ids":["CVE-2026-113300"],"payload":{"kind":"advisory","title":"CVE-2026-113300","summary":"Out of bounds write in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)","evidence":"cve:CVE-2026-113300","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113300","aliases":["CVE-2026-113300"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:18.259Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/513468106"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113300","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:18.259Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:39.876Z"}}},"related_cves":[{"value":"CVE-2026-113300","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:798304f0-883b-479c-9df8-5fbafeb50687","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113300","advisory_id":"798304f0-883b-479c-9df8-5fbafeb50687","event_types":["advisory"],"published_at":"2026-10-25T14:46:25.697454+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:39.876+00:00","detail_url":"/events/52501"}]}},{"id":52971,"cve_ids":["CVE-2026-113270"],"payload":{"kind":"advisory","title":"CVE-2026-113270","summary":"Use after free in Internals in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113270","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113270","aliases":["CVE-2026-113270"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:12.563Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/557501968"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113270","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:12.563Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:28.581Z"}}},"related_cves":[{"value":"CVE-2026-113270","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:5ca58e0b-89dc-496c-b332-0c948f86cf7a","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113270","advisory_id":"5ca58e0b-89dc-496c-b332-0c948f86cf7a","event_types":["advisory"],"published_at":"2026-10-25T14:46:25.089561+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:28.581+00:00","detail_url":"/advisories/advisory%3A5ca58e0b-89dc-496c-b332-0c948f86cf7a","group":{"id":"advisory:5ca58e0b-89dc-496c-b332-0c948f86cf7a","revision":1,"primary_event_id":52500,"change":"published","superseded_by":[],"changed":{"id":52500,"cve_ids":["CVE-2026-113270"],"payload":{"kind":"advisory","title":"CVE-2026-113270","summary":"Use after free in Internals in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113270","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113270","aliases":["CVE-2026-113270"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:12.563Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/557501968"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113270","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:12.563Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:28.581Z"}}},"related_cves":[{"value":"CVE-2026-113270","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:5ca58e0b-89dc-496c-b332-0c948f86cf7a","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113270","advisory_id":"5ca58e0b-89dc-496c-b332-0c948f86cf7a","event_types":["advisory"],"published_at":"2026-10-25T14:46:25.089561+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:28.581+00:00","detail_url":"/events/52500"},"members":[{"id":52500,"cve_ids":["CVE-2026-113270"],"payload":{"kind":"advisory","title":"CVE-2026-113270","summary":"Use after free in Internals in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113270","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113270","aliases":["CVE-2026-113270"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:12.563Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/557501968"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113270","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:12.563Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:28.581Z"}}},"related_cves":[{"value":"CVE-2026-113270","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:5ca58e0b-89dc-496c-b332-0c948f86cf7a","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113270","advisory_id":"5ca58e0b-89dc-496c-b332-0c948f86cf7a","event_types":["advisory"],"published_at":"2026-10-25T14:46:25.089561+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:28.581+00:00","detail_url":"/events/52500"}]}},{"id":52970,"cve_ids":["CVE-2026-113263"],"payload":{"kind":"advisory","title":"CVE-2026-113263","summary":"Use after free in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113263","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113263","aliases":["CVE-2026-113263"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:15.938Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/497026542"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113263","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:15.938Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:00.571Z"}}},"related_cves":[{"value":"CVE-2026-113263","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:479e3900-6a50-4c6e-97b3-4ed93300acde","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113263","advisory_id":"479e3900-6a50-4c6e-97b3-4ed93300acde","event_types":["advisory"],"published_at":"2026-10-25T14:46:24.052453+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:00.571+00:00","detail_url":"/advisories/advisory%3A479e3900-6a50-4c6e-97b3-4ed93300acde","group":{"id":"advisory:479e3900-6a50-4c6e-97b3-4ed93300acde","revision":1,"primary_event_id":52499,"change":"published","superseded_by":[],"changed":{"id":52499,"cve_ids":["CVE-2026-113263"],"payload":{"kind":"advisory","title":"CVE-2026-113263","summary":"Use after free in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113263","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113263","aliases":["CVE-2026-113263"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:15.938Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/497026542"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113263","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:15.938Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:00.571Z"}}},"related_cves":[{"value":"CVE-2026-113263","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:479e3900-6a50-4c6e-97b3-4ed93300acde","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113263","advisory_id":"479e3900-6a50-4c6e-97b3-4ed93300acde","event_types":["advisory"],"published_at":"2026-10-25T14:46:24.052453+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:00.571+00:00","detail_url":"/events/52499"},"members":[{"id":52499,"cve_ids":["CVE-2026-113263"],"payload":{"kind":"advisory","title":"CVE-2026-113263","summary":"Use after free in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113263","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113263","aliases":["CVE-2026-113263"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:15.938Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/497026542"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113263","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:15.938Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:00.571Z"}}},"related_cves":[{"value":"CVE-2026-113263","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:479e3900-6a50-4c6e-97b3-4ed93300acde","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113263","advisory_id":"479e3900-6a50-4c6e-97b3-4ed93300acde","event_types":["advisory"],"published_at":"2026-10-25T14:46:24.052453+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:00.571+00:00","detail_url":"/events/52499"}]}},{"id":52969,"cve_ids":["CVE-2026-113252"],"payload":{"kind":"advisory","title":"CVE-2026-113252","summary":"Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)","evidence":"cve:CVE-2026-113252","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113252","aliases":["CVE-2026-113252"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:29.719Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/556750258"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113252","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:29.719Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:01:51.022Z"}}},"related_cves":[{"value":"CVE-2026-113252","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:54e6fbf7-1f1f-404a-aa51-1baa825a8bc2","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113252","advisory_id":"54e6fbf7-1f1f-404a-aa51-1baa825a8bc2","event_types":["advisory"],"published_at":"2026-10-25T14:46:23.415438+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:01:51.022+00:00","detail_url":"/advisories/advisory%3A54e6fbf7-1f1f-404a-aa51-1baa825a8bc2","group":{"id":"advisory:54e6fbf7-1f1f-404a-aa51-1baa825a8bc2","revision":1,"primary_event_id":52498,"change":"published","superseded_by":[],"changed":{"id":52498,"cve_ids":["CVE-2026-113252"],"payload":{"kind":"advisory","title":"CVE-2026-113252","summary":"Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)","evidence":"cve:CVE-2026-113252","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113252","aliases":["CVE-2026-113252"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:29.719Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/556750258"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113252","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:29.719Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:01:51.022Z"}}},"related_cves":[{"value":"CVE-2026-113252","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:54e6fbf7-1f1f-404a-aa51-1baa825a8bc2","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113252","advisory_id":"54e6fbf7-1f1f-404a-aa51-1baa825a8bc2","event_types":["advisory"],"published_at":"2026-10-25T14:46:23.415438+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:01:51.022+00:00","detail_url":"/events/52498"},"members":[{"id":52498,"cve_ids":["CVE-2026-113252"],"payload":{"kind":"advisory","title":"CVE-2026-113252","summary":"Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)","evidence":"cve:CVE-2026-113252","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113252","aliases":["CVE-2026-113252"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:29.719Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/556750258"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113252","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:29.719Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:01:51.022Z"}}},"related_cves":[{"value":"CVE-2026-113252","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:54e6fbf7-1f1f-404a-aa51-1baa825a8bc2","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113252","advisory_id":"54e6fbf7-1f1f-404a-aa51-1baa825a8bc2","event_types":["advisory"],"published_at":"2026-10-25T14:46:23.415438+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:01:51.022+00:00","detail_url":"/events/52498"}]}},{"id":52968,"cve_ids":["CVE-2026-113261"],"payload":{"kind":"advisory","title":"CVE-2026-113261","summary":"Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113261","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113261","aliases":["CVE-2026-113261"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:13.405Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/515440087"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113261","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:13.405Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:16.116Z"}}},"related_cves":[{"value":"CVE-2026-113261","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e3426c57-2b5d-4970-8fd1-9ea8dfc16a9b","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113261","advisory_id":"e3426c57-2b5d-4970-8fd1-9ea8dfc16a9b","event_types":["advisory"],"published_at":"2026-10-25T14:46:22.759727+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:16.116+00:00","detail_url":"/advisories/advisory%3Ae3426c57-2b5d-4970-8fd1-9ea8dfc16a9b","group":{"id":"advisory:e3426c57-2b5d-4970-8fd1-9ea8dfc16a9b","revision":1,"primary_event_id":52497,"change":"published","superseded_by":[],"changed":{"id":52497,"cve_ids":["CVE-2026-113261"],"payload":{"kind":"advisory","title":"CVE-2026-113261","summary":"Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113261","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113261","aliases":["CVE-2026-113261"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:13.405Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/515440087"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113261","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:13.405Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:16.116Z"}}},"related_cves":[{"value":"CVE-2026-113261","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e3426c57-2b5d-4970-8fd1-9ea8dfc16a9b","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113261","advisory_id":"e3426c57-2b5d-4970-8fd1-9ea8dfc16a9b","event_types":["advisory"],"published_at":"2026-10-25T14:46:22.759727+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:16.116+00:00","detail_url":"/events/52497"},"members":[{"id":52497,"cve_ids":["CVE-2026-113261"],"payload":{"kind":"advisory","title":"CVE-2026-113261","summary":"Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113261","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113261","aliases":["CVE-2026-113261"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:13.405Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/515440087"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113261","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:13.405Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:16.116Z"}}},"related_cves":[{"value":"CVE-2026-113261","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e3426c57-2b5d-4970-8fd1-9ea8dfc16a9b","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113261","advisory_id":"e3426c57-2b5d-4970-8fd1-9ea8dfc16a9b","event_types":["advisory"],"published_at":"2026-10-25T14:46:22.759727+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:16.116+00:00","detail_url":"/events/52497"}]}},{"id":52967,"cve_ids":["CVE-2026-113235"],"payload":{"kind":"advisory","title":"CVE-2026-113235","summary":"Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113235","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113235","aliases":["CVE-2026-113235"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:24.582Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/563352925"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113235","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:24.582Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:35.441Z"}}},"related_cves":[{"value":"CVE-2026-113235","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:0c41c9ce-d281-47d9-a0db-e6549ee53145","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113235","advisory_id":"0c41c9ce-d281-47d9-a0db-e6549ee53145","event_types":["advisory"],"published_at":"2026-10-25T14:46:22.076525+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:35.441+00:00","detail_url":"/advisories/advisory%3A0c41c9ce-d281-47d9-a0db-e6549ee53145","group":{"id":"advisory:0c41c9ce-d281-47d9-a0db-e6549ee53145","revision":1,"primary_event_id":52496,"change":"published","superseded_by":[],"changed":{"id":52496,"cve_ids":["CVE-2026-113235"],"payload":{"kind":"advisory","title":"CVE-2026-113235","summary":"Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113235","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113235","aliases":["CVE-2026-113235"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:24.582Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/563352925"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113235","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:24.582Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:35.441Z"}}},"related_cves":[{"value":"CVE-2026-113235","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:0c41c9ce-d281-47d9-a0db-e6549ee53145","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113235","advisory_id":"0c41c9ce-d281-47d9-a0db-e6549ee53145","event_types":["advisory"],"published_at":"2026-10-25T14:46:22.076525+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:35.441+00:00","detail_url":"/events/52496"},"members":[{"id":52496,"cve_ids":["CVE-2026-113235"],"payload":{"kind":"advisory","title":"CVE-2026-113235","summary":"Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113235","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113235","aliases":["CVE-2026-113235"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:24.582Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/563352925"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113235","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:24.582Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:35.441Z"}}},"related_cves":[{"value":"CVE-2026-113235","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:0c41c9ce-d281-47d9-a0db-e6549ee53145","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113235","advisory_id":"0c41c9ce-d281-47d9-a0db-e6549ee53145","event_types":["advisory"],"published_at":"2026-10-25T14:46:22.076525+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:35.441+00:00","detail_url":"/events/52496"}]}},{"id":52966,"cve_ids":["CVE-2026-113189"],"payload":{"kind":"advisory","title":"CVE-2026-113189","summary":"Use after free in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113189","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113189","aliases":["CVE-2026-113189"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:14.404Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/514016335"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113189","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:14.404Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:13.836Z"}}},"related_cves":[{"value":"CVE-2026-113189","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:0b679dae-f2a4-4c1f-811a-9b064f30dd13","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113189","advisory_id":"0b679dae-f2a4-4c1f-811a-9b064f30dd13","event_types":["advisory"],"published_at":"2026-10-25T14:46:21.438614+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:13.836+00:00","detail_url":"/advisories/advisory%3A0b679dae-f2a4-4c1f-811a-9b064f30dd13","group":{"id":"advisory:0b679dae-f2a4-4c1f-811a-9b064f30dd13","revision":1,"primary_event_id":52495,"change":"published","superseded_by":[],"changed":{"id":52495,"cve_ids":["CVE-2026-113189"],"payload":{"kind":"advisory","title":"CVE-2026-113189","summary":"Use after free in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113189","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113189","aliases":["CVE-2026-113189"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:14.404Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/514016335"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113189","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:14.404Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:13.836Z"}}},"related_cves":[{"value":"CVE-2026-113189","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:0b679dae-f2a4-4c1f-811a-9b064f30dd13","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113189","advisory_id":"0b679dae-f2a4-4c1f-811a-9b064f30dd13","event_types":["advisory"],"published_at":"2026-10-25T14:46:21.438614+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:13.836+00:00","detail_url":"/events/52495"},"members":[{"id":52495,"cve_ids":["CVE-2026-113189"],"payload":{"kind":"advisory","title":"CVE-2026-113189","summary":"Use after free in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113189","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113189","aliases":["CVE-2026-113189"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:14.404Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/514016335"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113189","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:14.404Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:13.836Z"}}},"related_cves":[{"value":"CVE-2026-113189","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:0b679dae-f2a4-4c1f-811a-9b064f30dd13","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113189","advisory_id":"0b679dae-f2a4-4c1f-811a-9b064f30dd13","event_types":["advisory"],"published_at":"2026-10-25T14:46:21.438614+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:13.836+00:00","detail_url":"/events/52495"}]}},{"id":52965,"cve_ids":["CVE-2026-113222"],"payload":{"kind":"advisory","title":"CVE-2026-113222","summary":"Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)","evidence":"cve:CVE-2026-113222","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113222","aliases":["CVE-2026-113222"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:16.722Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/566091009"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113222","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:16.722Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:01:53.554Z"}}},"related_cves":[{"value":"CVE-2026-113222","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b5ff2513-eaf9-4311-baae-b7edae0c7e51","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113222","advisory_id":"b5ff2513-eaf9-4311-baae-b7edae0c7e51","event_types":["advisory"],"published_at":"2026-10-25T14:46:20.734432+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:01:53.554+00:00","detail_url":"/advisories/advisory%3Ab5ff2513-eaf9-4311-baae-b7edae0c7e51","group":{"id":"advisory:b5ff2513-eaf9-4311-baae-b7edae0c7e51","revision":1,"primary_event_id":52494,"change":"published","superseded_by":[],"changed":{"id":52494,"cve_ids":["CVE-2026-113222"],"payload":{"kind":"advisory","title":"CVE-2026-113222","summary":"Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)","evidence":"cve:CVE-2026-113222","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113222","aliases":["CVE-2026-113222"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:16.722Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/566091009"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113222","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:16.722Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:01:53.554Z"}}},"related_cves":[{"value":"CVE-2026-113222","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b5ff2513-eaf9-4311-baae-b7edae0c7e51","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113222","advisory_id":"b5ff2513-eaf9-4311-baae-b7edae0c7e51","event_types":["advisory"],"published_at":"2026-10-25T14:46:20.734432+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:01:53.554+00:00","detail_url":"/events/52494"},"members":[{"id":52494,"cve_ids":["CVE-2026-113222"],"payload":{"kind":"advisory","title":"CVE-2026-113222","summary":"Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)","evidence":"cve:CVE-2026-113222","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113222","aliases":["CVE-2026-113222"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:16.722Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/566091009"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113222","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:16.722Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:01:53.554Z"}}},"related_cves":[{"value":"CVE-2026-113222","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b5ff2513-eaf9-4311-baae-b7edae0c7e51","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113222","advisory_id":"b5ff2513-eaf9-4311-baae-b7edae0c7e51","event_types":["advisory"],"published_at":"2026-10-25T14:46:20.734432+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:01:53.554+00:00","detail_url":"/events/52494"}]}},{"id":52964,"cve_ids":["CVE-2026-113186"],"payload":{"kind":"advisory","title":"CVE-2026-113186","summary":"Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)","evidence":"cve:CVE-2026-113186","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113186","aliases":["CVE-2026-113186"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:03:58.941Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/533644359"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113186","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:03:58.941Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:44.158Z"}}},"related_cves":[{"value":"CVE-2026-113186","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b13b9088-7ab3-4094-8884-57eff741ba75","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113186","advisory_id":"b13b9088-7ab3-4094-8884-57eff741ba75","event_types":["advisory"],"published_at":"2026-10-25T14:46:20.047318+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:44.158+00:00","detail_url":"/advisories/advisory%3Ab13b9088-7ab3-4094-8884-57eff741ba75","group":{"id":"advisory:b13b9088-7ab3-4094-8884-57eff741ba75","revision":1,"primary_event_id":52493,"change":"published","superseded_by":[],"changed":{"id":52493,"cve_ids":["CVE-2026-113186"],"payload":{"kind":"advisory","title":"CVE-2026-113186","summary":"Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)","evidence":"cve:CVE-2026-113186","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113186","aliases":["CVE-2026-113186"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:03:58.941Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/533644359"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113186","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:03:58.941Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:44.158Z"}}},"related_cves":[{"value":"CVE-2026-113186","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b13b9088-7ab3-4094-8884-57eff741ba75","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113186","advisory_id":"b13b9088-7ab3-4094-8884-57eff741ba75","event_types":["advisory"],"published_at":"2026-10-25T14:46:20.047318+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:44.158+00:00","detail_url":"/events/52493"},"members":[{"id":52493,"cve_ids":["CVE-2026-113186"],"payload":{"kind":"advisory","title":"CVE-2026-113186","summary":"Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)","evidence":"cve:CVE-2026-113186","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113186","aliases":["CVE-2026-113186"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:03:58.941Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/533644359"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113186","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:03:58.941Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:44.158Z"}}},"related_cves":[{"value":"CVE-2026-113186","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b13b9088-7ab3-4094-8884-57eff741ba75","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113186","advisory_id":"b13b9088-7ab3-4094-8884-57eff741ba75","event_types":["advisory"],"published_at":"2026-10-25T14:46:20.047318+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:44.158+00:00","detail_url":"/events/52493"}]}},{"id":52963,"cve_ids":["CVE-2026-113211"],"payload":{"kind":"advisory","title":"CVE-2026-113211","summary":"Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113211","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113211","aliases":["CVE-2026-113211"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:09.143Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/498828493"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113211","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:09.143Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:02.505Z"}}},"related_cves":[{"value":"CVE-2026-113211","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:c052385e-f1b3-48c1-bda8-63f0e8b72ef8","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113211","advisory_id":"c052385e-f1b3-48c1-bda8-63f0e8b72ef8","event_types":["advisory"],"published_at":"2026-10-25T14:46:19.311421+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:02.505+00:00","detail_url":"/advisories/advisory%3Ac052385e-f1b3-48c1-bda8-63f0e8b72ef8","group":{"id":"advisory:c052385e-f1b3-48c1-bda8-63f0e8b72ef8","revision":1,"primary_event_id":52492,"change":"published","superseded_by":[],"changed":{"id":52492,"cve_ids":["CVE-2026-113211"],"payload":{"kind":"advisory","title":"CVE-2026-113211","summary":"Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113211","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113211","aliases":["CVE-2026-113211"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:09.143Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/498828493"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113211","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:09.143Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:02.505Z"}}},"related_cves":[{"value":"CVE-2026-113211","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:c052385e-f1b3-48c1-bda8-63f0e8b72ef8","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113211","advisory_id":"c052385e-f1b3-48c1-bda8-63f0e8b72ef8","event_types":["advisory"],"published_at":"2026-10-25T14:46:19.311421+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:02.505+00:00","detail_url":"/events/52492"},"members":[{"id":52492,"cve_ids":["CVE-2026-113211"],"payload":{"kind":"advisory","title":"CVE-2026-113211","summary":"Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113211","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113211","aliases":["CVE-2026-113211"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:09.143Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/498828493"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113211","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:09.143Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:02.505Z"}}},"related_cves":[{"value":"CVE-2026-113211","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:c052385e-f1b3-48c1-bda8-63f0e8b72ef8","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113211","advisory_id":"c052385e-f1b3-48c1-bda8-63f0e8b72ef8","event_types":["advisory"],"published_at":"2026-10-25T14:46:19.311421+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:02.505+00:00","detail_url":"/events/52492"}]}},{"id":52962,"cve_ids":["CVE-2026-113171"],"payload":{"kind":"advisory","title":"CVE-2026-113171","summary":"Memory corruption in Prompts in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113171","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113171","aliases":["CVE-2026-113171"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:06.753Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/517477395"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113171","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:06.753Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:17.503Z"}}},"related_cves":[{"value":"CVE-2026-113171","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4f8d6547-3206-41c5-a81e-b799a849c2ea","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113171","advisory_id":"4f8d6547-3206-41c5-a81e-b799a849c2ea","event_types":["advisory"],"published_at":"2026-10-25T14:45:22.260069+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:17.503+00:00","detail_url":"/advisories/advisory%3A4f8d6547-3206-41c5-a81e-b799a849c2ea","group":{"id":"advisory:4f8d6547-3206-41c5-a81e-b799a849c2ea","revision":1,"primary_event_id":52491,"change":"published","superseded_by":[],"changed":{"id":52491,"cve_ids":["CVE-2026-113171"],"payload":{"kind":"advisory","title":"CVE-2026-113171","summary":"Memory corruption in Prompts in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113171","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113171","aliases":["CVE-2026-113171"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:06.753Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/517477395"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113171","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:06.753Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:17.503Z"}}},"related_cves":[{"value":"CVE-2026-113171","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4f8d6547-3206-41c5-a81e-b799a849c2ea","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113171","advisory_id":"4f8d6547-3206-41c5-a81e-b799a849c2ea","event_types":["advisory"],"published_at":"2026-10-25T14:45:22.260069+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:17.503+00:00","detail_url":"/events/52491"},"members":[{"id":52491,"cve_ids":["CVE-2026-113171"],"payload":{"kind":"advisory","title":"CVE-2026-113171","summary":"Memory corruption in Prompts in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113171","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113171","aliases":["CVE-2026-113171"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:06.753Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/517477395"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113171","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:06.753Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:17.503Z"}}},"related_cves":[{"value":"CVE-2026-113171","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4f8d6547-3206-41c5-a81e-b799a849c2ea","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113171","advisory_id":"4f8d6547-3206-41c5-a81e-b799a849c2ea","event_types":["advisory"],"published_at":"2026-10-25T14:45:22.260069+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:17.503+00:00","detail_url":"/events/52491"}]}},{"id":52961,"cve_ids":["CVE-2026-113169"],"payload":{"kind":"advisory","title":"CVE-2026-113169","summary":"Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)","evidence":"cve:CVE-2026-113169","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113169","aliases":["CVE-2026-113169"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:03:58.192Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562955271"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113169","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:03:58.192Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:49.754Z"}}},"related_cves":[{"value":"CVE-2026-113169","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:0b18cc99-56ef-4dd1-ac79-275c2deb3924","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113169","advisory_id":"0b18cc99-56ef-4dd1-ac79-275c2deb3924","event_types":["advisory"],"published_at":"2026-10-25T14:45:21.579557+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:49.754+00:00","detail_url":"/advisories/advisory%3A0b18cc99-56ef-4dd1-ac79-275c2deb3924","group":{"id":"advisory:0b18cc99-56ef-4dd1-ac79-275c2deb3924","revision":1,"primary_event_id":52490,"change":"published","superseded_by":[],"changed":{"id":52490,"cve_ids":["CVE-2026-113169"],"payload":{"kind":"advisory","title":"CVE-2026-113169","summary":"Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)","evidence":"cve:CVE-2026-113169","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113169","aliases":["CVE-2026-113169"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:03:58.192Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562955271"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113169","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:03:58.192Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:49.754Z"}}},"related_cves":[{"value":"CVE-2026-113169","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:0b18cc99-56ef-4dd1-ac79-275c2deb3924","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113169","advisory_id":"0b18cc99-56ef-4dd1-ac79-275c2deb3924","event_types":["advisory"],"published_at":"2026-10-25T14:45:21.579557+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:49.754+00:00","detail_url":"/events/52490"},"members":[{"id":52490,"cve_ids":["CVE-2026-113169"],"payload":{"kind":"advisory","title":"CVE-2026-113169","summary":"Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)","evidence":"cve:CVE-2026-113169","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113169","aliases":["CVE-2026-113169"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:03:58.192Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562955271"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113169","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:03:58.192Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:49.754Z"}}},"related_cves":[{"value":"CVE-2026-113169","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:0b18cc99-56ef-4dd1-ac79-275c2deb3924","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113169","advisory_id":"0b18cc99-56ef-4dd1-ac79-275c2deb3924","event_types":["advisory"],"published_at":"2026-10-25T14:45:21.579557+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:49.754+00:00","detail_url":"/events/52490"}]}},{"id":52960,"cve_ids":["CVE-2026-113147"],"payload":{"kind":"advisory","title":"CVE-2026-113147","summary":"Improper input validation in WebShare in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113147","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113147","aliases":["CVE-2026-113147"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:03:57.400Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/501531546"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113147","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-20T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:03:57.400Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:05.596Z"}}},"related_cves":[{"value":"CVE-2026-113147","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:26445ee1-58de-4b73-9c2d-35926efdd6cd","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113147","advisory_id":"26445ee1-58de-4b73-9c2d-35926efdd6cd","event_types":["advisory"],"published_at":"2026-10-25T14:45:20.716682+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:05.596+00:00","detail_url":"/advisories/advisory%3A26445ee1-58de-4b73-9c2d-35926efdd6cd","group":{"id":"advisory:26445ee1-58de-4b73-9c2d-35926efdd6cd","revision":1,"primary_event_id":52489,"change":"published","superseded_by":[],"changed":{"id":52489,"cve_ids":["CVE-2026-113147"],"payload":{"kind":"advisory","title":"CVE-2026-113147","summary":"Improper input validation in WebShare in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113147","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113147","aliases":["CVE-2026-113147"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:03:57.400Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/501531546"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113147","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-20T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:03:57.400Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:05.596Z"}}},"related_cves":[{"value":"CVE-2026-113147","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:26445ee1-58de-4b73-9c2d-35926efdd6cd","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113147","advisory_id":"26445ee1-58de-4b73-9c2d-35926efdd6cd","event_types":["advisory"],"published_at":"2026-10-25T14:45:20.716682+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:05.596+00:00","detail_url":"/events/52489"},"members":[{"id":52489,"cve_ids":["CVE-2026-113147"],"payload":{"kind":"advisory","title":"CVE-2026-113147","summary":"Improper input validation in WebShare in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113147","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113147","aliases":["CVE-2026-113147"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:03:57.400Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/501531546"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113147","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-20T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:03:57.400Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:05.596Z"}}},"related_cves":[{"value":"CVE-2026-113147","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:26445ee1-58de-4b73-9c2d-35926efdd6cd","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113147","advisory_id":"26445ee1-58de-4b73-9c2d-35926efdd6cd","event_types":["advisory"],"published_at":"2026-10-25T14:45:20.716682+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:05.596+00:00","detail_url":"/events/52489"}]}},{"id":52959,"cve_ids":["CVE-2026-113146"],"payload":{"kind":"advisory","title":"CVE-2026-113146","summary":"Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113146","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113146","aliases":["CVE-2026-113146"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:58.960Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/511325076"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113146","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:58.960Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:10.476Z"}}},"related_cves":[{"value":"CVE-2026-113146","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:642bd258-9ab7-4316-bfd6-63b18ba54624","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113146","advisory_id":"642bd258-9ab7-4316-bfd6-63b18ba54624","event_types":["advisory"],"published_at":"2026-10-25T14:45:20.417236+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:10.476+00:00","detail_url":"/advisories/advisory%3A642bd258-9ab7-4316-bfd6-63b18ba54624","group":{"id":"advisory:642bd258-9ab7-4316-bfd6-63b18ba54624","revision":1,"primary_event_id":52488,"change":"published","superseded_by":[],"changed":{"id":52488,"cve_ids":["CVE-2026-113146"],"payload":{"kind":"advisory","title":"CVE-2026-113146","summary":"Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113146","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113146","aliases":["CVE-2026-113146"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:58.960Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/511325076"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113146","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:58.960Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:10.476Z"}}},"related_cves":[{"value":"CVE-2026-113146","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:642bd258-9ab7-4316-bfd6-63b18ba54624","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113146","advisory_id":"642bd258-9ab7-4316-bfd6-63b18ba54624","event_types":["advisory"],"published_at":"2026-10-25T14:45:20.417236+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:10.476+00:00","detail_url":"/events/52488"},"members":[{"id":52488,"cve_ids":["CVE-2026-113146"],"payload":{"kind":"advisory","title":"CVE-2026-113146","summary":"Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113146","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113146","aliases":["CVE-2026-113146"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:58.960Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/511325076"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113146","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:58.960Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:10.476Z"}}},"related_cves":[{"value":"CVE-2026-113146","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:642bd258-9ab7-4316-bfd6-63b18ba54624","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113146","advisory_id":"642bd258-9ab7-4316-bfd6-63b18ba54624","event_types":["advisory"],"published_at":"2026-10-25T14:45:20.417236+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:10.476+00:00","detail_url":"/events/52488"}]}},{"id":52958,"cve_ids":["CVE-2026-113141"],"payload":{"kind":"advisory","title":"CVE-2026-113141","summary":"Use after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)","evidence":"cve:CVE-2026-113141","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113141","aliases":["CVE-2026-113141"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:03:54.715Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553128833"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113141","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-20T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:03:54.715Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:01:50.430Z"}}},"related_cves":[{"value":"CVE-2026-113141","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:9f58ab03-9590-42b5-b8bd-57705acb5d39","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113141","advisory_id":"9f58ab03-9590-42b5-b8bd-57705acb5d39","event_types":["advisory"],"published_at":"2026-10-25T14:45:20.023047+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:01:50.43+00:00","detail_url":"/advisories/advisory%3A9f58ab03-9590-42b5-b8bd-57705acb5d39","group":{"id":"advisory:9f58ab03-9590-42b5-b8bd-57705acb5d39","revision":1,"primary_event_id":52487,"change":"published","superseded_by":[],"changed":{"id":52487,"cve_ids":["CVE-2026-113141"],"payload":{"kind":"advisory","title":"CVE-2026-113141","summary":"Use after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)","evidence":"cve:CVE-2026-113141","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113141","aliases":["CVE-2026-113141"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:03:54.715Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553128833"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113141","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-20T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:03:54.715Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:01:50.430Z"}}},"related_cves":[{"value":"CVE-2026-113141","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:9f58ab03-9590-42b5-b8bd-57705acb5d39","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113141","advisory_id":"9f58ab03-9590-42b5-b8bd-57705acb5d39","event_types":["advisory"],"published_at":"2026-10-25T14:45:20.023047+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:01:50.43+00:00","detail_url":"/events/52487"},"members":[{"id":52487,"cve_ids":["CVE-2026-113141"],"payload":{"kind":"advisory","title":"CVE-2026-113141","summary":"Use after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)","evidence":"cve:CVE-2026-113141","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113141","aliases":["CVE-2026-113141"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:03:54.715Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553128833"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113141","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-20T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:03:54.715Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:01:50.430Z"}}},"related_cves":[{"value":"CVE-2026-113141","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:9f58ab03-9590-42b5-b8bd-57705acb5d39","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113141","advisory_id":"9f58ab03-9590-42b5-b8bd-57705acb5d39","event_types":["advisory"],"published_at":"2026-10-25T14:45:20.023047+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:01:50.43+00:00","detail_url":"/events/52487"}]}},{"id":52957,"cve_ids":["CVE-2026-113138"],"payload":{"kind":"advisory","title":"CVE-2026-113138","summary":"Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113138","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113138","aliases":["CVE-2026-113138"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:01.554Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/561396577"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113138","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:01.554Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:30.735Z"}}},"related_cves":[{"value":"CVE-2026-113138","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:735088a7-2cdf-4bfe-9bfb-3ef8579b1a4a","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113138","advisory_id":"735088a7-2cdf-4bfe-9bfb-3ef8579b1a4a","event_types":["advisory"],"published_at":"2026-10-25T14:45:19.521234+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:30.735+00:00","detail_url":"/advisories/advisory%3A735088a7-2cdf-4bfe-9bfb-3ef8579b1a4a","group":{"id":"advisory:735088a7-2cdf-4bfe-9bfb-3ef8579b1a4a","revision":1,"primary_event_id":52486,"change":"published","superseded_by":[],"changed":{"id":52486,"cve_ids":["CVE-2026-113138"],"payload":{"kind":"advisory","title":"CVE-2026-113138","summary":"Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113138","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113138","aliases":["CVE-2026-113138"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:01.554Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/561396577"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113138","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:01.554Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:30.735Z"}}},"related_cves":[{"value":"CVE-2026-113138","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:735088a7-2cdf-4bfe-9bfb-3ef8579b1a4a","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113138","advisory_id":"735088a7-2cdf-4bfe-9bfb-3ef8579b1a4a","event_types":["advisory"],"published_at":"2026-10-25T14:45:19.521234+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:30.735+00:00","detail_url":"/events/52486"},"members":[{"id":52486,"cve_ids":["CVE-2026-113138"],"payload":{"kind":"advisory","title":"CVE-2026-113138","summary":"Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113138","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113138","aliases":["CVE-2026-113138"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:01.554Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/561396577"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113138","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:01.554Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:30.735Z"}}},"related_cves":[{"value":"CVE-2026-113138","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:735088a7-2cdf-4bfe-9bfb-3ef8579b1a4a","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113138","advisory_id":"735088a7-2cdf-4bfe-9bfb-3ef8579b1a4a","event_types":["advisory"],"published_at":"2026-10-25T14:45:19.521234+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:30.735+00:00","detail_url":"/events/52486"}]}},{"id":52956,"cve_ids":["CVE-2026-113126"],"payload":{"kind":"advisory","title":"CVE-2026-113126","summary":"Memory corruption in PolicyContainer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113126","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113126","aliases":["CVE-2026-113126"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:05.739Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/531182364"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113126","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:05.739Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:22.031Z"}}},"related_cves":[{"value":"CVE-2026-113126","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:493fdd59-7bfc-4583-85f1-f911caaa93c4","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113126","advisory_id":"493fdd59-7bfc-4583-85f1-f911caaa93c4","event_types":["advisory"],"published_at":"2026-10-25T14:45:19.133103+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:22.031+00:00","detail_url":"/advisories/advisory%3A493fdd59-7bfc-4583-85f1-f911caaa93c4","group":{"id":"advisory:493fdd59-7bfc-4583-85f1-f911caaa93c4","revision":1,"primary_event_id":52485,"change":"published","superseded_by":[],"changed":{"id":52485,"cve_ids":["CVE-2026-113126"],"payload":{"kind":"advisory","title":"CVE-2026-113126","summary":"Memory corruption in PolicyContainer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113126","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113126","aliases":["CVE-2026-113126"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:05.739Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/531182364"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113126","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:05.739Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:22.031Z"}}},"related_cves":[{"value":"CVE-2026-113126","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:493fdd59-7bfc-4583-85f1-f911caaa93c4","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113126","advisory_id":"493fdd59-7bfc-4583-85f1-f911caaa93c4","event_types":["advisory"],"published_at":"2026-10-25T14:45:19.133103+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:22.031+00:00","detail_url":"/events/52485"},"members":[{"id":52485,"cve_ids":["CVE-2026-113126"],"payload":{"kind":"advisory","title":"CVE-2026-113126","summary":"Memory corruption in PolicyContainer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113126","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113126","aliases":["CVE-2026-113126"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:05.739Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/531182364"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113126","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:05.739Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:22.031Z"}}},"related_cves":[{"value":"CVE-2026-113126","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:493fdd59-7bfc-4583-85f1-f911caaa93c4","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113126","advisory_id":"493fdd59-7bfc-4583-85f1-f911caaa93c4","event_types":["advisory"],"published_at":"2026-10-25T14:45:19.133103+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:22.031+00:00","detail_url":"/events/52485"}]}},{"id":52955,"cve_ids":["CVE-2026-113118"],"payload":{"kind":"advisory","title":"CVE-2026-113118","summary":"Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113118","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113118","aliases":["CVE-2026-113118"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:03:55.812Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/513184498"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113118","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-20T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:03:55.812Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:11.226Z"}}},"related_cves":[{"value":"CVE-2026-113118","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:09dfda07-f983-4067-b436-2b0e4927a52b","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113118","advisory_id":"09dfda07-f983-4067-b436-2b0e4927a52b","event_types":["advisory"],"published_at":"2026-10-25T14:45:18.64838+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:11.226+00:00","detail_url":"/advisories/advisory%3A09dfda07-f983-4067-b436-2b0e4927a52b","group":{"id":"advisory:09dfda07-f983-4067-b436-2b0e4927a52b","revision":1,"primary_event_id":52484,"change":"published","superseded_by":[],"changed":{"id":52484,"cve_ids":["CVE-2026-113118"],"payload":{"kind":"advisory","title":"CVE-2026-113118","summary":"Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113118","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113118","aliases":["CVE-2026-113118"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:03:55.812Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/513184498"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113118","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-20T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:03:55.812Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:11.226Z"}}},"related_cves":[{"value":"CVE-2026-113118","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:09dfda07-f983-4067-b436-2b0e4927a52b","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113118","advisory_id":"09dfda07-f983-4067-b436-2b0e4927a52b","event_types":["advisory"],"published_at":"2026-10-25T14:45:18.64838+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:11.226+00:00","detail_url":"/events/52484"},"members":[{"id":52484,"cve_ids":["CVE-2026-113118"],"payload":{"kind":"advisory","title":"CVE-2026-113118","summary":"Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113118","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113118","aliases":["CVE-2026-113118"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:03:55.812Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/513184498"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113118","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-20T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:03:55.812Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:11.226Z"}}},"related_cves":[{"value":"CVE-2026-113118","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:09dfda07-f983-4067-b436-2b0e4927a52b","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113118","advisory_id":"09dfda07-f983-4067-b436-2b0e4927a52b","event_types":["advisory"],"published_at":"2026-10-25T14:45:18.64838+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:11.226+00:00","detail_url":"/events/52484"}]}},{"id":52954,"cve_ids":["CVE-2026-113116"],"payload":{"kind":"advisory","title":"CVE-2026-113116","summary":"Use after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)","evidence":"cve:CVE-2026-113116","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113116","aliases":["CVE-2026-113116"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:11.502Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553259748"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113116","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:11.502Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:46.081Z"}}},"related_cves":[{"value":"CVE-2026-113116","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b97221b3-42d7-41c6-a995-c33d371ac4aa","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113116","advisory_id":"b97221b3-42d7-41c6-a995-c33d371ac4aa","event_types":["advisory"],"published_at":"2026-10-25T14:45:17.334728+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:46.081+00:00","detail_url":"/advisories/advisory%3Ab97221b3-42d7-41c6-a995-c33d371ac4aa","group":{"id":"advisory:b97221b3-42d7-41c6-a995-c33d371ac4aa","revision":1,"primary_event_id":52483,"change":"published","superseded_by":[],"changed":{"id":52483,"cve_ids":["CVE-2026-113116"],"payload":{"kind":"advisory","title":"CVE-2026-113116","summary":"Use after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)","evidence":"cve:CVE-2026-113116","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113116","aliases":["CVE-2026-113116"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:11.502Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553259748"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113116","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:11.502Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:46.081Z"}}},"related_cves":[{"value":"CVE-2026-113116","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b97221b3-42d7-41c6-a995-c33d371ac4aa","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113116","advisory_id":"b97221b3-42d7-41c6-a995-c33d371ac4aa","event_types":["advisory"],"published_at":"2026-10-25T14:45:17.334728+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:46.081+00:00","detail_url":"/events/52483"},"members":[{"id":52483,"cve_ids":["CVE-2026-113116"],"payload":{"kind":"advisory","title":"CVE-2026-113116","summary":"Use after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)","evidence":"cve:CVE-2026-113116","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113116","aliases":["CVE-2026-113116"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:11.502Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553259748"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113116","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:11.502Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:46.081Z"}}},"related_cves":[{"value":"CVE-2026-113116","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b97221b3-42d7-41c6-a995-c33d371ac4aa","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113116","advisory_id":"b97221b3-42d7-41c6-a995-c33d371ac4aa","event_types":["advisory"],"published_at":"2026-10-25T14:45:17.334728+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:46.081+00:00","detail_url":"/events/52483"}]}},{"id":52953,"cve_ids":["CVE-2026-113089"],"payload":{"kind":"advisory","title":"CVE-2026-113089","summary":"Improper input validation in PrintPreview in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113089","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113089","aliases":["CVE-2026-113089"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:22.657Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/563362367"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113089","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:22.657Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:35.645Z"}}},"related_cves":[{"value":"CVE-2026-113089","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:7c0d1025-ecc1-4959-839d-77a4951c2059","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113089","advisory_id":"7c0d1025-ecc1-4959-839d-77a4951c2059","event_types":["advisory"],"published_at":"2026-10-25T14:45:16.469614+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:35.645+00:00","detail_url":"/advisories/advisory%3A7c0d1025-ecc1-4959-839d-77a4951c2059","group":{"id":"advisory:7c0d1025-ecc1-4959-839d-77a4951c2059","revision":1,"primary_event_id":52482,"change":"published","superseded_by":[],"changed":{"id":52482,"cve_ids":["CVE-2026-113089"],"payload":{"kind":"advisory","title":"CVE-2026-113089","summary":"Improper input validation in PrintPreview in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113089","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113089","aliases":["CVE-2026-113089"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:22.657Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/563362367"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113089","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:22.657Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:35.645Z"}}},"related_cves":[{"value":"CVE-2026-113089","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:7c0d1025-ecc1-4959-839d-77a4951c2059","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113089","advisory_id":"7c0d1025-ecc1-4959-839d-77a4951c2059","event_types":["advisory"],"published_at":"2026-10-25T14:45:16.469614+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:35.645+00:00","detail_url":"/events/52482"},"members":[{"id":52482,"cve_ids":["CVE-2026-113089"],"payload":{"kind":"advisory","title":"CVE-2026-113089","summary":"Improper input validation in PrintPreview in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113089","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113089","aliases":["CVE-2026-113089"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:22.657Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/563362367"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113089","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:22.657Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:35.645Z"}}},"related_cves":[{"value":"CVE-2026-113089","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:7c0d1025-ecc1-4959-839d-77a4951c2059","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113089","advisory_id":"7c0d1025-ecc1-4959-839d-77a4951c2059","event_types":["advisory"],"published_at":"2026-10-25T14:45:16.469614+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:35.645+00:00","detail_url":"/events/52482"}]}},{"id":52952,"cve_ids":["CVE-2026-113084"],"payload":{"kind":"advisory","title":"CVE-2026-113084","summary":"Improper input validation in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113084","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113084","aliases":["CVE-2026-113084"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:25.861Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/518099505"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113084","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:25.861Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:19.389Z"}}},"related_cves":[{"value":"CVE-2026-113084","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:3cc19d47-2245-4190-8405-750bddd805af","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113084","advisory_id":"3cc19d47-2245-4190-8405-750bddd805af","event_types":["advisory"],"published_at":"2026-10-25T14:45:15.571682+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:19.389+00:00","detail_url":"/advisories/advisory%3A3cc19d47-2245-4190-8405-750bddd805af","group":{"id":"advisory:3cc19d47-2245-4190-8405-750bddd805af","revision":1,"primary_event_id":52481,"change":"published","superseded_by":[],"changed":{"id":52481,"cve_ids":["CVE-2026-113084"],"payload":{"kind":"advisory","title":"CVE-2026-113084","summary":"Improper input validation in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113084","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113084","aliases":["CVE-2026-113084"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:25.861Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/518099505"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113084","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:25.861Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:19.389Z"}}},"related_cves":[{"value":"CVE-2026-113084","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:3cc19d47-2245-4190-8405-750bddd805af","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113084","advisory_id":"3cc19d47-2245-4190-8405-750bddd805af","event_types":["advisory"],"published_at":"2026-10-25T14:45:15.571682+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:19.389+00:00","detail_url":"/events/52481"},"members":[{"id":52481,"cve_ids":["CVE-2026-113084"],"payload":{"kind":"advisory","title":"CVE-2026-113084","summary":"Improper input validation in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113084","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113084","aliases":["CVE-2026-113084"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:25.861Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/518099505"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113084","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:25.861Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:19.389Z"}}},"related_cves":[{"value":"CVE-2026-113084","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:3cc19d47-2245-4190-8405-750bddd805af","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113084","advisory_id":"3cc19d47-2245-4190-8405-750bddd805af","event_types":["advisory"],"published_at":"2026-10-25T14:45:15.571682+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:19.389+00:00","detail_url":"/events/52481"}]}},{"id":52951,"cve_ids":["CVE-2026-113078"],"payload":{"kind":"advisory","title":"CVE-2026-113078","summary":"Improper input validation in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113078","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113078","aliases":["CVE-2026-113078"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:28.922Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/499520020"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113078","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:28.922Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:04.069Z"}}},"related_cves":[{"value":"CVE-2026-113078","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:c8cbbc1e-c98d-401a-949a-c6d8614d16c1","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113078","advisory_id":"c8cbbc1e-c98d-401a-949a-c6d8614d16c1","event_types":["advisory"],"published_at":"2026-10-25T14:45:14.880488+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:04.069+00:00","detail_url":"/advisories/advisory%3Ac8cbbc1e-c98d-401a-949a-c6d8614d16c1","group":{"id":"advisory:c8cbbc1e-c98d-401a-949a-c6d8614d16c1","revision":1,"primary_event_id":52480,"change":"published","superseded_by":[],"changed":{"id":52480,"cve_ids":["CVE-2026-113078"],"payload":{"kind":"advisory","title":"CVE-2026-113078","summary":"Improper input validation in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113078","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113078","aliases":["CVE-2026-113078"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:28.922Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/499520020"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113078","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:28.922Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:04.069Z"}}},"related_cves":[{"value":"CVE-2026-113078","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:c8cbbc1e-c98d-401a-949a-c6d8614d16c1","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113078","advisory_id":"c8cbbc1e-c98d-401a-949a-c6d8614d16c1","event_types":["advisory"],"published_at":"2026-10-25T14:45:14.880488+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:04.069+00:00","detail_url":"/events/52480"},"members":[{"id":52480,"cve_ids":["CVE-2026-113078"],"payload":{"kind":"advisory","title":"CVE-2026-113078","summary":"Improper input validation in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-113078","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-113078","aliases":["CVE-2026-113078"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"156.0.8078.47","lessThan":"156.0.8078.47","versionType":"custom"}]}],"modified":"2026-10-22T23:04:28.922Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/499520020"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-113078","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:04:28.922Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-20T21:02:04.069Z"}}},"related_cves":[{"value":"CVE-2026-113078","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:c8cbbc1e-c98d-401a-949a-c6d8614d16c1","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113078","advisory_id":"c8cbbc1e-c98d-401a-949a-c6d8614d16c1","event_types":["advisory"],"published_at":"2026-10-25T14:45:14.880488+00:00","technologies":["chrome","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T21:02:04.069+00:00","detail_url":"/events/52480"}]}}],"next_after":53375,"next_before":52951}