What is GHSA-7299-96qq-m4wx?

GHSA-7299-96qq-m4wx is a security advisory published by GitHub Security Advisories with High severity. Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.47 allowed a...

Which CVE IDs does GHSA-7299-96qq-m4wx cover?

GHSA-7299-96qq-m4wx covers the following CVE IDs: CVE-2026-113173. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-7299-96qq-m4wx?

GHSA-7299-96qq-m4wx has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

GHSA-7299-96qq-m4wxHighCVSS 8.8

Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.47 allowed a...

Vendor

GitHub Security Advisories

Published

October 21, 2026

Last Modified

October 21, 2026

🔗 CVE IDs covered (1)

CVE-2026-113173 →

📋 Description

Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-113173
https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html
https://issues.chromium.org/issues/553274389
https://github.com/advisories/GHSA-7299-96qq-m4wx