CVE WatchOct 21, 2026

CVE-2026-113239

Range error in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code insid

CVSS

8.8

High

EPSS

—

KEV

—

Exploit Today

0-100

Published: Oct 20, 2026 · Last modified: Oct 21, 2026 · CWE-118

EPSS · 30d

Not enough EPSS history yet.

Technical description

Range error in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Official references

chromereleases.googleblog.comhttps://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html
issues.chromium.orghttps://issues.chromium.org/issues/500522368

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-503677.8 HIG

25.2%

——8Incorrect access of indexable resource ('range error') in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.91d