CVE-2026-113310: Out of bounds read in Google Chrome

This vulnerability is an out-of-bounds read flaw in the Bluetooth implementation of Google Chrome before version 156.0.8078.47. An attacker can exploit this by delivering a specially crafted HTML page that triggers the out-of-bounds read, allowing them to access memory within the sandboxed environment. The flaw was assigned a high severity by Chromium security. The issue is addressed by updating to Chrome version 156.0.8078.47 or later.

Successful exploitation allows a remote attacker to read memory inside the sandboxed process of Chrome, potentially exposing sensitive information. The sandbox containment limits the scope of impact but does not eliminate the risk of information disclosure.

Users and administrators should update Google Chrome to version 156.0.8078.47 or later, where this vulnerability is fixed. Refer to the official Google Chrome stable channel update announcement for details: https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html. No additional mitigation steps are indicated by the vendor.