CVE-2026-113322
Medium · 6.5CVSS
6.5
EPSS
0.4%
Published
Oct 20, 2026
CISA due date
—
The record
Uninitialized resource in Dawn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-121227 Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote… CWE-908
- CVE-2026-121213 Uninitialized resource in Images in Google Chrome prior to 157.0.8103.38 allowed a remote… CWE-908
- CVE-2026-121207 Uninitialized resource in Dawn in Google Chrome on on Mac prior to 157.0.8103.38 allowed… CWE-908
- CVE-2026-121176 Uninitialized resource in Media in Google Chrome prior to 157.0.8103.38 allowed a remote… CWE-908
- CVE-2026-121173 Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.38 allowed a remote… CWE-908
- CVE-2026-121143 Uninitialized resource in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote… CWE-908
- CVE-2026-121095 Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.38 allowed a remote… CWE-908
- CVE-2026-121072 Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote… CWE-908