CVE-2026-113157

Published: Oct 20, 2026Modified: Oct 21, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Information leak in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html

Source: chrome-cve-admin@google.com

https://issues.chromium.org/issues/563352515

Source: chrome-cve-admin@google.com

Timeline

No history available yet.