PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-113143 Google CVE debrief

A memory corruption vulnerability in ANGLE in Google Chrome prior to 156.0.8078.47 allows remote attackers to read memory via crafted HTML pages. This issue, reported by the Chromium security team with a medium severity rating, highlights the importance of keeping browser software up-to-date. The vulnerability affects Google Chrome installations and requires immediate attention from IT and security teams to prevent potential data exposure or unauthorized access. Users should update to version 156.0.8078.47 or later to mitigate this vulnerability.

Vendor
Google
Product
Chrome
CVSS
Unknown
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-20
Original CVE updated
2026-10-29
Advisory published
2026-10-20
Advisory updated
2026-10-29

Who should care

IT and security teams responsible for managing browser updates and ensuring the security of Google Chrome installations should prioritize updating to version 156.0.8078.47 or later.

Why it matters

This memory corruption vulnerability in ANGLE in Google Chrome prior to 156.0.8078.47 requires immediate attention from IT and security teams to prevent potential data exposure or unauthorized access.

  • Read memory via crafted HTML pages
  • Potential for data exposure or unauthorized access

Technical summary

The memory corruption vulnerability in ANGLE in Google Chrome prior to 156.0.8078.47 allows remote attackers to read memory via crafted HTML pages. This issue has a medium severity rating according to the Chromium security team. The vulnerability affects Google Chrome installations and requires immediate attention from IT and security teams to prevent potential data exposure or unauthorized access. The affected version is prior to 156.0.8078.47, and users should update to this version or later to mitigate this vulnerability.

Defensive priority

Defenders should prioritize updating Google Chrome to version 156.0.8078.47 or later to mitigate this vulnerability. This requires immediate attention from IT and security teams responsible for managing browser updates.

Recommended defensive actions

  • Update Google Chrome to version 156.0.8078.47 or later
  • Review and apply security patches for Google Chrome
  • Monitor browser updates and security advisories
  • Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
  • Review compensating controls for exposed systems while remediation is scheduled and verified
  • Check relevant monitoring, detection, and logs for exposed assets that need extra review
  • Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The CVE record and source item provide details on the memory corruption vulnerability in ANGLE in Google Chrome. The Chromium security severity is rated as Medium. The affected version is prior to 156.0.8078.47.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-113143 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-113143

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-113143 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-113143

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • CVE-2026-113143

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113143.json

    cve_program_cvelist_v5

  • Source reference

    Unverified legacy reference

    URL: https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html

    Supplemental source

  • Source reference

    Unverified legacy reference

    URL: https://issues.chromium.org/issues/563352451

    Supplemental source

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.