Loading vulnerability…
Skia Memory Corruption in Google Chrome
CVE-2026-113341 is a memory-corruption vulnerability in the Skia graphics component affecting Google Chrome for Android before version 156.0.8078.47. Rendering a specially crafted HTML page could allow a remote attacker to read memory within the browser sandbox. Chromium classifies the vulnerability as Critical. Chromium-based Microsoft Edge is also affected. The precise vulnerable function and memory-corruption mechanism are not established.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation could disclose memory contents within the browser sandbox, potentially exposing sensitive information available to the affected process. The vulnerability-specific assessment identifies high confidentiality impact without established integrity or availability impact. Arbitrary code execution, sandbox escape, and full device compromise are not established.
If you can’t patch tonight, do this now.
No vulnerability-specific workaround is documented. Site isolation and remote browser isolation may provide defense in depth for high-risk browsing, but are not established substitutes for installing the security update.
Patch, then assume compromise.
Upgrade Google Chrome for Android to version 156.0.8078.47 or later. Update affected Microsoft Edge installations to the latest available release incorporating the Chromium fix. Restart the browser after installation to ensure the patched version is running. For distribution-managed Chromium packages, apply the distribution's applicable security update and verify its vulnerability status rather than relying solely on the upstream version number.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
8 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.