Chrome Variations: bypass system access limits (fix 156.0.8078.47)

high severity · published 2026-10-20

A nearby attacker on the same network or link can get around the limits on what a web page may access on the system through crafted network traffic, using an insufficient verification of data authenticity flaw in the Variations component of Chrome. Chromium rates it Medium.

Fixed in: 156.0.8078.47

CVE: CVE-2026-113205

Source: NVD

Am I affected?

You are affected if the installed version is older than 156.0.8078.47. Check the version you have and update to 156.0.8078.47 or later. The fixed version is verified against a vendor or advisory source.

Get the fix

FixLane has a reviewed fix procedure for this incident: a read-only check first, then the fix. Ask the Telegram bot, or connect an AI agent to the FixLane MCP server and call get_fix_prompt with incident id 390 and your operating system.