← All vulnerabilities
CVE-2026-113116EUVD-2026-105730GHSA-R57P-9X2H-7563

Use after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside t

Published
Last modified
Status
published
Known exploitation
Not listed in CISA KEV
Fix
Fixed in 156.0.8078.47
Public exploit
None on Exploit-DB

Summary

Use after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)

Affected versions

  • Google Chrome

    From 156.0.8078.47 · fixed in 156.0.8078.47

References 2

chromereleases.googleblog.com

issues.chromium.org