CVE-2026-113295: Out of bounds read in Google Chrome

This vulnerability involves an out-of-bounds read in the ANGLE graphics engine used by Google Chrome on Windows platforms. The flaw allows a remote attacker to craft a malicious HTML page that triggers the out-of-bounds read, enabling the attacker to access memory within the sandboxed environment of the browser. The issue affects Chrome versions before 156.0.8078.47. Google has released a stable channel update to address this vulnerability.

An attacker who successfully exploits this vulnerability can read memory inside the sandboxed environment of Chrome, potentially exposing sensitive information. The vulnerability is rated as high severity by the Chromium security team. There are no known exploits in the wild at the time of this report.

Google has released an official fix in Chrome version 156.0.8078.47. Users and administrators should update to this version or later to remediate the vulnerability. No additional mitigation actions are indicated by the vendor advisory.