CVE-2026-113142 Google CVE debrief

Who should care

Chrome users and administrators should assess exposure and prioritize updates to version 156.0.8078.47 or later. This includes reviewing compensating controls for exposed systems, monitoring for potential memory corruption attempts, and verifying Chrome version to ensure it is up-to-date. Security teams and vulnerability management teams should also review the official advisory and CVE record to validate affected scope, severity, and vendor guidance.

Why it matters

CVE-2026-113142 is a memory corruption vulnerability in Google Chrome Extensions that allows potential memory read via crafted HTML pages. Chrome users and administrators should assess exposure and prioritize updates to version 156.0.8078.47 or later.

• Potential memory read via crafted HTML pages.
• Required version update to 156.0.8078.47 or later for Chrome users.

Technical summary

Memory corruption vulnerability in Google Chrome Extensions prior to 156.0.8078.47 allows remote attackers to potentially read memory inside the sandbox via crafted HTML pages. This vulnerability has a Medium security severity according to Chromium, emphasizing the need for users to update to the latest version to prevent potential attacks. The vulnerability is detailed in the official CVE Program record and NIST NVD, providing a source-grounded technical framing of the issue without unsupported root-cause or exploit claims.

Defensive priority

Medium

Recommended defensive actions

• Assess exposure for Chrome users and prioritize updates to version 156.0.8078.47 or later.
• Verify Chrome version and update to 156.0.8078.47 or later if vulnerable.
• Monitor for potential memory corruption attempts via crafted HTML pages.
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.

Evidence notes

Official CVE Program record and NIST NVD detail page confirm memory corruption vulnerability in Google Chrome prior to 156.0.8078.47. Chromium security severity is Medium. Evidence is limited to publicly available details from CVE Program and NIST NVD, with no additional claims or unsupported facts. Defenders should verify Chrome version and update to 156.0.8078.47 or later if vulnerable.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.