Microsoft Security Response CenterCVE-2026-113291

Chromium CVE-2026-113291: Memory corruption

LowVendor CVSS 8.8 / 10 1 CVE Published Oct 22, 2026 at 7:44 PM UTC

Get alerts for Microsoft Edge (Chromium-based)

Summary

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Products covered

Microsoft Edge (Chromium-based)

Remediation

Release Notes

Vendor-listed fixes

156.0.4314.42

CVEs in this advisory 1

CVE-2026-113291

Updates

Oct 22, 2026 at 7:44 PM UTC
Published by Microsoft Security Response Center
The publication date reported by the vendor.
Oct 23, 2026 at 1:55 AM UTC
Added to SecurityAlert
We collected the advisory from the official source.

Source

Details collected from Microsoft Security Response Center.

Vendor: Microsoft Security Response Center
Advisory ID: CVE-2026-113291
Last source check: Oct 23, 2026 at 1:55 AM UTC

Official bulletin How SecurityAlert builds this record

Your environment

Check the systems you actually run

A vendor advisory can tell you what may be affected. It cannot tell you whether that product and version are installed in your environment.

Confirm the product and installed version.
Read the vendor's prerequisites and exceptions.
Test the update or mitigation through your normal change process.

Watch Microsoft Edge (Chromium-based)

Keep following

Get new Microsoft Security Response Center advisories

Use the vendor-specific RSS feed or set up alerts for a product your team relies on.

Follow this vendor's RSS feed

Summary

Products covered

Remediation

Vendor-listed fixes

CVEs in this advisory 1

Updates

Related advisories from Microsoft Security Response Center

Chromium CVE-2026-113290: Use after free

Chromium CVE-2026-113289: Improper input validation

Chromium CVE-2026-113288: Memory corruption

Chromium CVE-2026-113287: Use after free

Chromium CVE-2026-113286: Memory corruption

Chromium CVE-2026-113285: Memory corruption