CVE-2026-113271

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2026-10-20 Modified: 2026-11-03 First seen: 2026-11-03 Status: pending_score

Description

Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
Google Chrome 156.0.8078.47 < 156.0.8078.47

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.51%
Raw Score 0.005100
Percentile 44.1%
Date 2026-11-14

EPSS Trend

2026-11-14
0.00510
2026-11-13
0.00510
2026-11-12
0.00510
2026-11-10
0.00510
2026-11-09
0.00510
2026-11-08
0.00510
2026-11-07
0.00510
2026-11-06
0.00510
2026-11-05
0.00510
2026-11-04
0.00510
2026-11-03
0.00510

Intelligence Sources

mitre ref →