CVE-2026-113229
High · 8.8CVSS
8.8
EPSS
0.2%
Published
Oct 20, 2026
CISA due date
—
The record
Improper signature verification in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-91899 Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper… CWE-347
- CVE-2026-91898 Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper… CWE-347
- CVE-2026-120459 python-jose through 3.5.0 contains an authentication bypass vulnerability that allows… CWE-347
- CVE-2026-91908 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Verification of… CWE-347
- CVE-2026-91905 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Verification of… CWE-347
- CVE-2026-117549 @fastify/secure-session is a session plugin for Fastify that stores an encrypted session… CWE-347
- CVE-2026-116474 The `GITEA_TOKEN` of a Gitea Actions job authenticates as the `gitea-actions` system… CWE-347
- CVE-2026-63182 LightSAML implements SAML 2.0 data model classes, XML serialization and deserialization… CWE-347