CVE-2026-113028
High · 8.8CVSS
8.8
EPSS
0.3%
Published
Oct 20, 2026
CISA due date
—
The record
Use of uninitialized variable in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted media file. (Chromium security severity: Medium)
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-118448 A use of uninitialized memory vulnerability in the pybddisasm Python bindings affects… CWE-457
- CVE-2026-118447 A use of uninitialized memory vulnerability in the pybddisasm Python bindings may… CWE-457
- CVE-2026-120061 The psqlODBC parser for ODBC escape sequences in application SQL text writes the argument… CWE-457
- CVE-2026-120246 FFmpeg 4.4 through 9.0.2 contains a use of uninitialized variable vulnerability in the… CWE-457
- CVE-2026-120243 FFmpeg 2.0 through 9.0.2 contains a use of uninitialized variable vulnerability in the… CWE-457
- CVE-2026-113120 Use of uninitialized variable in Media in Google Chrome prior to 156.0.8078.47 allowed a… CWE-457
- CVE-2026-113100 Use of uninitialized variable in Audio in Google Chrome prior to 156.0.8078.47 allowed a… CWE-457
- CVE-2026-113030 Use of uninitialized variable in V8 in Google Chrome prior to 156.0.8078.47 allowed a… CWE-457