← All vulnerabilities
CVE-2026-113084EUVD-2026-105584GHSA-C59X-X6G2-6XF3

Improper input validation in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary

Published
Last modified
Status
published
Known exploitation
Not listed in CISA KEV
Fix
Fixed in 156.0.8078.47
Public exploit
None on Exploit-DB

Summary

Improper input validation in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Affected versions

  • Google Chrome

    From 156.0.8078.47 · fixed in 156.0.8078.47

References 2

chromereleases.googleblog.com

issues.chromium.org