CVE-2026-113158

high

Description

Use after free in Streaming in Google Chrome prior to 156.0.8078.47 allowed an adjacent attacker to potentially execute arbitrary code inside the sandbox via crafted network traffic. (Chromium security severity: Medium)

References

https://issues.chromium.org/issues/553157579

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-105628

https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html

Details

Source: Mitre, NVD

Published: 2026-10-20

Updated: 2026-11-03

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 8.8

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.00325