PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-113230 Google CVE debrief

CVE-2026-113230 Improper input validation in Google Chrome allows potential code execution inside the sandbox via a crafted HTML page. This vulnerability affects Google Chrome prior to version 156.0.8078.47 and has a medium severity impact. Defenders should assess exposure and prioritize updating to the latest version to prevent potential code execution inside the sandbox. The CVE record was published on 2026-10-20T21:02:25.659Z and has not been modified since then. The vulnerability has been publicly disclosed and requires immediate attention from defenders responsible for Google Chrome deployments.

Vendor
Google
Product
Chrome
CVSS
Unknown
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-20
Original CVE updated
2026-10-21
Advisory published
2026-10-20
Advisory updated
2026-10-21

Who should care

Defenders responsible for Google Chrome deployments should assess exposure and prioritize updating to the latest version to prevent potential code execution inside the sandbox. This includes reviewing and verifying the input validation in Google Chrome, monitoring Google Chrome for any suspicious activity, and planning vendor-supported updates or mitigations through normal change control where exposure is confirmed.

Why it matters

CVE-2026-113230 requires defenders to verify input validation in Google Chrome, assess exposure, and update to the latest version to prevent potential code execution inside the sandbox.

  • Potential code execution inside the sandbox requires verification
  • Input validation review and verification are necessary
  • Updating to the latest Google Chrome version is recommended

Technical summary

Improper input validation in Google Chrome prior to 156.0.8078.47 allows a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. The vulnerability has a medium severity impact and requires immediate attention from defenders responsible for Google Chrome deployments. The CVE record was published on 2026-10-20T21:02:25.659Z and has not been modified since then. The vulnerability has been publicly disclosed and requires defenders to verify input validation in Google Chrome, assess exposure, and update to the latest version.

Defensive priority

Medium

Recommended defensive actions

  • Update Google Chrome to version 156.0.8078.47 or later
  • Review and verify the input validation in Google Chrome
  • Monitor Google Chrome for any suspicious activity
  • Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
  • Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.
  • Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.
  • Check relevant monitoring, detection, and logs for exposed assets that need extra review.

Evidence notes

Official CVE Program record and NIST NVD detail page provide information on the vulnerability. Google Chrome versions prior to 156.0.8078.47 are affected. The CVE record was published on 2026-10-20T21:02:25.659Z and has not been modified since then. The vulnerability has been publicly disclosed and requires immediate attention from defenders. The source item providing CVE-2026-113230 details is cve_program_cvelist_v5.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-113230 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-113230

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-113230 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-113230

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • CVE-2026-113230

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113230.json

    cve_program_cvelist_v5

  • Source reference

    Unverified legacy reference

    URL: https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html

    Supplemental source

  • Source reference

    Unverified legacy reference

    URL: https://issues.chromium.org/issues/553153823

    Supplemental source

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.