Description
Observable discrepancy in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
Published: 2026-10-20
Score: 9.6 Critical
EPSS: < 1% Very Low
KEV: No
Impact: Information Disclosure
Action: Immediate Patch
AI Analysis

Impact

Canvas in Google Chrome prior to 156.0.8078.47 contains a discrepancy that can be triggered by a crafted HTML page, enabling an attacker to read cross‑origin data that should normally be inaccessible. The issue is reported by Chromium with medium severity, but the CVSS score of 9.6 indicates a high impact.

Affected Systems

Google Chrome browsers prior to version 156.0.8078.47 on desktop platforms are affected.

Risk and Exploitability

The CVSS score of 9.6 indicates a high severity. The EPSS score is below 1% and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is a remote web page that a user can visit, so it requires user interaction with malicious content. Exploitation requires crafting a Canvas-based payload that triggers the observed discrepancy, allowing the attacker to read cross‑origin data that should be protected.

Generated by OpenCVE AI on November 4, 2026 at 12:05 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade Google Chrome to version 156.0.8078.47 or later, which contains the Canvas memory corruption fix.
  • Ensure automatic updates are enabled so subsequent patch releases are applied without manual intervention.
  • If an immediate upgrade is not possible, disable the Canvas API or use an extension that blocks execution of Canvas code until the patch is installed.

Generated by OpenCVE AI on November 4, 2026 at 12:05 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-4853-1 chromium security update
Debian DSA Debian DSA DSA-6577-1 chromium security update
History

Wed, 04 Nov 2026 12:30:00 +0000

Type Values Removed Values Added
Title Canvas Memory Corruption Enabling Remote Code Execution via Crafted HTML

Tue, 03 Nov 2026 22:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-119

Tue, 03 Nov 2026 21:30:00 +0000

Type Values Removed Values Added
Description Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Observable discrepancy in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
Weaknesses CWE-203

Thu, 22 Oct 2026 18:30:00 +0000

Type Values Removed Values Added
Title Canvas Memory Corruption Enabling Remote Code Execution via Crafted HTML

Wed, 21 Oct 2026 18:00:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google chrome
CPEs cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
Vendors & Products Google
Google chrome

Wed, 21 Oct 2026 02:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 21 Oct 2026 01:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 9.6, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H'}

Tue, 20 Oct 2026 21:30:00 +0000

Type Values Removed Values Added
Description Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Weaknesses CWE-119
References

Subscriptions

Google Chrome
cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published:

Updated: 2026-11-03T21:20:46.383Z

Reserved: 2026-10-19T22:47:53.434Z

Link: CVE-2026-112992

cve-icon Vulnrichment

Updated: 2026-10-21T00:45:32.883Z

cve-icon NVD

Status : Modified

Published: 2026-10-20T22:18:48.740

Modified: 2026-11-03T22:17:48.073

Link: CVE-2026-112992

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-11-04T12:15:13Z

Weaknesses