CVE-2026-113020
Critical · 9.6CVSS
9.6
EPSS
0.5%
Published
Oct 20, 2026
CISA due date
—
The record
Use after free in Date in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-104608 A remote code execution vulnerability was identified in GitHub Enterprise Server in the… CWE-416
- CVE-2026-121257 Use after free in TabStrip in Google Chrome prior to 157.0.8103.38 allowed a remote… CWE-416
- CVE-2026-121246 Use after free in WebGL in Google Chrome on on Android prior to 157.0.8103.38 allowed a… CWE-416
- CVE-2026-121250 Use after free in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote… CWE-416
- CVE-2026-121241 Use after free in Navigation in Google Chrome on on Android prior to 157.0.8103.38… CWE-416
- CVE-2026-121238 Use after free in Source in Google Chrome prior to 157.0.8103.38 allowed a remote… CWE-416
- CVE-2026-121217 Use after free in Streaming in Google Chrome prior to 157.0.8103.38 allowed an adjacent… CWE-416
- CVE-2026-121211 Use after free in PowerBookmarks in Google Chrome prior to 157.0.8103.38 allowed a remote… CWE-416