Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Memory corruption in WebRTC in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
Google closed 353 vulnerabilities in Chrome 156. Six are critical, including CVE-2026-113303 in WebRTC and CVE-2026-113279 in Accessibility. The announcement came on 20-21 October 2026. Chrome now asks for permission before connecting to insecure HTTP sites. The setting is on by default for all users. Update and restart Chrome. The fixes do not take effect until the browser restarts.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | chrome | - | - | - |