High severity8.8NVD Advisory· Published Oct 20, 2026· Updated Oct 21, 2026
CVE-2026-113195
CVE-2026-113195
Description
Improper input validation in Downloads in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Affected products
1Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.