CVE-2026-113205

Description

Insufficient verification of data authenticity in Variations in Google Chrome prior to 156.0.8078.47 allowed an adjacent attacker to bypass system access restrictions via crafted network traffic. (Chromium security severity: Medium)

References

https://issues.chromium.org/issues/511820971

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-105541

https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS