CVE-2026-113283

CRITICAL · 9.6 CVSS Gepubliceerd: 21-10-2026 CWE-269

Beschrijving

Improper privilege management in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a local attacker to execute arbitrary code outside the sandbox via physical access. (Chromium security severity: Medium)

Vendors

Google Microsoft

Affected products

Chrome Windows

References

chromereleases.googleblog.com
issues.chromium.org