# CERT-FR flags Chrome 156 vulnerabilities

Published: 2026-10-21 · Severity: high
Canonical: https://vorant.io/reports/815b1da7-e2bd-5fe8-8e3a-27994dd45663/cert-fr-flags-chrome-156-vulnerabilities

> CERT-FR advises multiple Chrome vulnerabilities before version 156.0.8078.47/48, with no confirmed exploitation or severity detail from Google.

CERT-FR has published an advisory covering a large batch of vulnerabilities affecting Google Chrome for Windows, Linux, and Mac prior to versions 156.0.8078.47 (Windows/Linux) and 156.0.8078.48 (Mac). The advisory references Google's own stable channel update blog post from October 20, 2026, and enumerates several hundred CVE identifiers associated with the release, though no specific technical details, exploitation status, or severity ratings are provided by the publisher beyond stating the impact is 'unspecified by the vendor.'

Defenders should treat this as a routine browser patch cycle: update affected Chrome installations to the fixed versions as soon as possible via standard update mechanisms. No indicators of compromise, threat actor attribution, or in-the-wild exploitation are mentioned in this advisory. Organizations should consult Google's official release notes for further technical detail on individual flaws and prioritize patching based on their own exposure and any subsequent in-the-wild exploitation reports.

## Mentioned in this report

- Vulnerabilities: CVE-2026-112992, CVE-2026-112993, CVE-2026-112994, CVE-2026-112995, CVE-2026-112996, CVE-2026-112997, CVE-2026-112998, CVE-2026-112999, CVE-2026-113000, CVE-2026-113001, CVE-2026-113002, CVE-2026-113003, CVE-2026-113004, CVE-2026-113005, CVE-2026-113006, CVE-2026-113007, CVE-2026-113008, CVE-2026-113009, CVE-2026-113010, CVE-2026-113011, CVE-2026-113012, CVE-2026-113013, CVE-2026-113014, CVE-2026-113015, CVE-2026-113016, CVE-2026-113017, CVE-2026-113018, CVE-2026-113019, CVE-2026-113020, CVE-2026-113021, CVE-2026-113022, CVE-2026-113023, CVE-2026-113024, CVE-2026-113025, CVE-2026-113026, CVE-2026-113027, CVE-2026-113028, CVE-2026-113029, CVE-2026-113030, CVE-2026-113031

Source reporting: https://www.cert.cyber.gouv.fr/avis/CERTFR-2026-AVI-1357

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/815b1da7-e2bd-5fe8-8e3a-27994dd45663/cert-fr-flags-chrome-156-vulnerabilities.
In the app the same report carries live profiles of the CVEs it names. The paid plans add the security research and news reporting the free tier leaves out. Slack alerts on the vendors, sectors and countries a reader follows come with the paid plans too. A new account starts with a three-day trial, no card: https://vorant.io/signup