← All vulnerabilities
CVE-2026-113056EUVD-2026-105694GHSA-7X57-4H3R-PRRG

Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code

Published
Last modified
Status
published
Known exploitation
Not listed in CISA KEV
Fix
Fixed in 156.0.8078.47
Public exploit
None on Exploit-DB

Summary

Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)

Affected versions

  • Google Chrome

    From 156.0.8078.47 · fixed in 156.0.8078.47

References 2

chromereleases.googleblog.com

issues.chromium.org