CVE-2026-113057
Modified Modified - Updated After Analysis

Improper Access Control in ComputePressure in Google Chrome

Publication date: 2026-10-20

Last updated on: 2026-11-03

Assigner: Chrome

Description
Observable discrepancy in ComputePressure in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-20
Last Modified
2026-11-03
Generated
2026-11-10
AI Q&A
2026-10-21
EPSS Evaluated
2026-11-08
NVD
CVE-2026-113057
EUVD
EUVD-2026-105527

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
google chrome to 156.0.8078.47 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-203 The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor.
CWE-284 The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an improper access control issue in the ComputePressure feature of Google Chrome before version 156.0.8078.47. It allows a remote attacker to bypass the web origin policy by tricking a user into visiting a specially crafted HTML page.

Impact Analysis

An attacker could exploit this to access sensitive data from different websites or perform actions on behalf of the user without proper authorization. This could lead to data theft, unauthorized account access, or other malicious activities.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or other standards as it involves improper access control in a web browser component. However, if exploited, it could lead to unauthorized data access, which may impact compliance depending on the context of use.

Mitigation Strategies

Update Google Chrome to version 156.0.8078.47 or later to address the improper access control in ComputePressure.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-113057. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...