cve.nowby Sazabi
← All vulnerabilities
CVE-2026-113261EUVD-2026-105567GHSA-WR7G-24PV-GWPC

Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code out

Published
Last modified
Status
published
Known exploitation
Not listed in CISA KEV
Fix
Fixed in 156.0.8078.47
Public exploit
None on Exploit-DB

Summary

Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Affected versions

  • Google Chrome

    From 156.0.8078.47 · fixed in 156.0.8078.47

References 2

chromereleases.googleblog.com

issues.chromium.org