Patch Forecast
Yellow warning
Plan into this sprint.

CVE-2026-113196

Improper access control in Mobile in Google Chrome on on iOS prior to 156.0.8078.47 allowed a…

Risk score
45/100
CVSS
6.5 v3.1
Exploit chance (30 days)
0.4%
Published
20 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is
Improper access control in Mobile in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
Affected
See advisory
Fix
Upgrade the product to 156.0.8078.47 or later.
Exploitation
No known exploitation

Why it is Yellow

  • CVSS 6.5 medium

References

Original description

Improper access control in Mobile in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

Last activity 20 Oct 2026. Patch Forecast updates every hour.