CVE-2026-113071
High · 8.8CVSS
8.8
EPSS
0.4%
Published
Oct 20, 2026
CISA due date
—
The record
Use of insufficiently random values in Notifications in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-120223 A vulnerability was identified in Oray Pugongying X5 Pro up to 7.6.1. CWE-330
- CVE-2026-79981 The DNS stub resolver in subsys/net/lib/dns/resolve.c binds one UDP socket per configured… CWE-330
- CVE-2026-106074 A flaw in Node.js `crypto` causes the internal entropy caches used by… CWE-330
- CVE-2026-46347 The Goobi viewer is a web application that allows digitised material to be displayed in a… CWE-330
- CVE-2026-46346 The Goobi viewer is a web application that allows digitised material to be displayed in a… CWE-330
- CVE-2026-55889 XDG Desktop Portal is a desktop integration portal. CWE-330
- CVE-2026-114576 A vulnerability has been found in Linksys RE6250 1.0.04.001. CWE-330
- CVE-2026-6719 IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that… CWE-330