Upstream information

CVE-2026-113128 at MITRE

Description

Missing authorization in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

SUSE information

Overall state of this security issue: New

This issue is currently rated as having critical severity.

SUSE Bugzilla entry: 1286350 [IN_PROGRESS]

No SUSE Security Announcements cross referenced.

SUSE Timeline for this CVE

CVE page created: Wed Oct 21 13:55:33 2026
CVE page last modified: Wed Oct 21 17:15:55 2026