{"metadata": {"vulnerability": "CVE-2026-113043", "count": 30, "kinds": {"milestone": 9, "sighting": 4, "kev": 0, "other": 17}}, "data": [{"timestamp": "2026-10-19T22:53:35.820Z", "date_only": false, "value": "2026-10-19T22:53:35.820Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-113043", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-20T00:00:00Z", "date_only": true, "value": "2026-10-20", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1357", "record": "CERTFR-2026-AVI-1357", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-10-20T00:00:00Z", "date_only": false, "value": "2026-10-20T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-113043", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-10-20T00:00:00Z", "date_only": false, "value": "2026-10-20T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-113043", "record": "FKIE_CVE-2026-113043", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-20T20:00:00Z", "date_only": false, "value": "2026-10-20T20:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20261021", "record": "CVE-2026-113043", "field": "creation_timestamp", "uuid": "e9710c1e-84ff-4299-9ac7-b39a0beb3cd4", "url": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20261021"}, {"timestamp": "2026-10-20T21:02:20.980Z", "date_only": false, "value": "2026-10-20T21:02:20.980Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-113043", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-20T21:02:20.980Z", "date_only": false, "value": "2026-10-20T21:02:20.980Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Chrome", "record": "CVE-2026-113043", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-20T21:52:41.631Z", "date_only": false, "value": "2026-10-20T21:52:41.631854Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117475453244069562", "record": "CVE-2026-113043", "field": "creation_timestamp", "uuid": "7cc027dd-86da-4537-aab4-9b22e893d2ef", "content": "CVE-2026-113043  Use after free in iOSWeb in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)\nhttps://www.cve.org/CVERecord?id=CVE-2026-113043https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.htmlhttps://issues.chromium.org/issues/521978171#chromium #Google #Chrome#CVE_2026_113043#bot", "url": "https://infosec.exchange/users/cve/statuses/117475453244069562"}, {"timestamp": "2026-10-20T22:18:55Z", "date_only": false, "value": "2026-10-20T22:18:55Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-544G-VCR7-JRGR", "record": "GHSA-544G-VCR7-JRGR", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-20T22:18:55.457Z", "date_only": false, "value": "2026-10-20T22:18:55.457", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-113043", "record": "FKIE_CVE-2026-113043", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-21T00:00:00Z", "date_only": false, "value": "2026-10-21T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1357", "record": "CERTFR-2026-AVI-1357", "field": "last_revision_date"}, {"timestamp": "2026-10-21T00:00:00Z", "date_only": false, "value": "2026-10-21T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1357", "record": "CERTFR-2026-AVI-1357", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-21T00:00:00Z", "date_only": false, "value": "2026-10-21T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1357", "record": "CERTFR-2026-AVI-1357", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-21T00:32:39Z", "date_only": false, "value": "2026-10-21T00:32:39Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-544G-VCR7-JRGR", "record": "GHSA-544G-VCR7-JRGR", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-21T00:32:39Z", "date_only": false, "value": "2026-10-21T00:32:39Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-544G-VCR7-JRGR", "record": "GHSA-544G-VCR7-JRGR", "field": "modified"}, {"timestamp": "2026-10-21T03:56:55.728Z", "date_only": false, "value": "2026-10-21T03:56:55.728Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-113043", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-21T03:56:55.728Z", "date_only": false, "value": "2026-10-21T03:56:55.728Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-113043", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-21T19:28:41.720Z", "date_only": false, "value": "2026-10-21T19:28:41.720", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-113043", "record": "FKIE_CVE-2026-113043", "field": "lastModified"}, {"timestamp": "2026-10-22T00:00:00Z", "date_only": true, "value": "2026-10-22", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1371", "record": "CERTFR-2026-AVI-1371", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-10-22T10:47:49Z", "date_only": false, "value": "2026-10-22T10:47:49.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/harshrollan/b2f37ed813f28b7e75d96ccbfa770fd4", "record": "CVE-2026-113043", "field": "creation_timestamp", "uuid": "74ea7ec1-ec78-436e-809b-c618faf34097", "content": "CVE-2026-113043 \u2014 iOSWeb UAF lab\n\nChrome on iOS only. Verdict \u00b7 crash detector \u00b7 UAF stress \u00b7 reachable surface.\n\n\n\n  \nchecking\u2026\n  \n\n\n\n\nCrash detector\n\n\n  \nPrevious run ended\u2014\n  \nHeartbeat0\n  \nJS errors caught0\n  \nIf the renderer dies, the heartbeat stops and the page reloads. On the next load, \"Previous run ended\" flips to ABRUPT. That is your crash signal.\n\n\n\nUAF stress harness\n\n\n  Run 300 rounds (blob-iframe churn)\n  Run 800 rounds (hard)\n  \nidle.\n\n\n\nLocation\n\n\n  Request precise location\n  \n\nTap, then allow the prompt. Attacker value here is the decimal precision + the fact that a watchPosition stream runs silently.\n\n\n\nDevice / system surface\n\n\ngathering\u2026\n\n\nOther apps (URL-scheme enumeration)\n\n\n  Probe ~20 installed apps\n  \nEach probe jumps to the app and back. Hits are unreliable in both directions \u2014 universal links are invisible and some schemes are claimed by several apps. Treat it as inference, not ground truth.\n  \n\n\n\n\nEvent log\n\n\u2014", "url": "https://gist.github.com/harshrollan/b2f37ed813f28b7e75d96ccbfa770fd4"}, {"timestamp": "2026-10-23T00:00:00Z", "date_only": false, "value": "2026-10-23T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12234-1", "record": "OPENSUSE-SU-2026:12234-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-23T00:00:00Z", "date_only": false, "value": "2026-10-23T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12234-1", "record": "OPENSUSE-SU-2026:12234-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-23T00:00:00Z", "date_only": false, "value": "2026-10-23T00:00:00Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12234-1", "record": "OPENSUSE-SU-2026:12234-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-10-23T00:00:00Z", "date_only": false, "value": "2026-10-23T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1371", "record": "CERTFR-2026-AVI-1371", "field": "last_revision_date"}, {"timestamp": "2026-10-23T00:00:00Z", "date_only": false, "value": "2026-10-23T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1371", "record": "CERTFR-2026-AVI-1371", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-23T00:00:00Z", "date_only": false, "value": "2026-10-23T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12234-1", "record": "OPENSUSE-SU-2026:12234-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-23T00:00:00Z", "date_only": false, "value": "2026-10-23T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1371", "record": "CERTFR-2026-AVI-1371", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-24T08:49:19Z", "date_only": false, "value": "2026-10-24T08:49:19Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12234-1", "record": "OPENSUSE-SU-2026:12234-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-24T08:49:19Z", "date_only": false, "value": "2026-10-24T08:49:19Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12234-1", "record": "OPENSUSE-SU-2026:12234-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T18:00:00Z", "date_only": false, "value": "2026-10-26T18:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20261027", "record": "CVE-2026-113043", "field": "creation_timestamp", "uuid": "98801963-35c8-4def-be64-d042531cf6bb", "url": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20261027"}], "metrics": {"as_of": "2026-10-30T11:11:41.529Z", "anchors": {"origin": {"timestamp": "2026-10-20T21:02:20.980Z", "date_only": false, "value": "2026-10-20T21:02:20.980Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-113043", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-20T21:02:20.980Z", "date_only": false, "value": "2026-10-20T21:02:20.980Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-113043", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 828560.549783, "hours": 230.15570827305555, "days": 9.589821178043982, "min_seconds": 828560.549783, "max_seconds": 828560.549783, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-20T21:02:20.980Z", "date_only": false, "value": "2026-10-20T21:02:20.980Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-113043", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-30T11:11:41.529Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}