High
8.8
Improper input validation in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a...
CVE-2026-113289
First seen on SecPulse
Original description The description as published by the source.
Improper input validation in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Source: NIST National Vulnerability Database NVD GitHub Advisory
References
- web chrome-cve-admin@google.com
- web chrome-cve-admin@google.com
- web nvd.nist.gov
- web github.com