CVE-2026-113190: Use after free in Google Chrome

CVE-2026-113190 is a use-after-free vulnerability in the ServiceWorker implementation of Google Chrome versions before 156.0.8078.47. Exploitation involves a remote attacker crafting a malicious HTML page that triggers the flaw, potentially enabling arbitrary code execution inside the browser's sandbox environment. The vulnerability is rated high severity with a CVSS 3.1 base score of 8.8, reflecting its network attack vector, low attack complexity, no privileges required, and high impact on confidentiality, integrity, and availability.

Successful exploitation could allow remote attackers to execute arbitrary code within the sandboxed environment of the browser, potentially compromising the confidentiality, integrity, and availability of the affected system. However, there are no known exploits in the wild at this time.

A fix is available in Google Chrome version 156.0.8078.47. Users and administrators should update to this version or later to remediate the vulnerability. Refer to the official Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html for detailed update instructions.