CVE-2026-113026
Medium · 6.5CVSS
6.5
EPSS
0.4%
Published
Oct 20, 2026
CISA due date
—
The record
Information loss in PDF in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-121134 Information loss in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a… CWE-221
- CVE-2026-76027 Information loss in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote… CWE-221
- CVE-2026-113238 Information loss in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47… CWE-221
- CVE-2026-113108 Information loss in Script in Google Chrome prior to 156.0.8078.47 allowed a remote… CWE-221
- CVE-2026-87535 Information loss or omission in Safebrowsing in Google Chrome on on Mac prior to… CWE-221
- GHSA-cpmj-h4f6-r6pq Harden-Runner: Bypassing Logging of Outbound Connections Using sendto, sendmsg, and… CWE-221