Tools AI-Found Vulnerability Register aifv-0118
Register entry
Chrome ServiceWorker: memory corruption
- CVE
- CVE-2026-113318
- Project
- Google Chrome
- Component
- ServiceWorker
- Finder
- Xinyang Ge assisted by Claude
- Autonomy
- human researcher assisted by Claude
- Evidence tier
- CNA credits the finder in its own advisory
- Assigner
- Chrome
- Severity
- High (Chromium security severity)
- Confidence
- CONFIRMED
What happened
Google’s Chrome 156 release credits Xinyang Ge (Anthropic), assisted by Claude with this ServiceWorker finding.
Credit as recorded: Xinyang Ge (Anthropic), assisted by Claude. The release was published on 20 October 2026. Google lists the researcher report date as 2026-09-25. The fix is in 156.0.8078.47 for Linux and 156.0.8078.47/.48 for Windows and macOS. The listed reward is N/A, so the register records no confirmed payment. The public credit supplies no model version. Date basis: CNA publication and Chrome 156 release; researcher report date 2026-09-25.
Sources
- Chrome 156 release and original creditchromereleases.googleblog.com/2026/10/stable-channel-update-…
- Canonical CVE recordraw.githubusercontent.com/CVEProject/cvelistV5/main/cves/202…
One record from the AI-Found Vulnerability Register, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 28 October 2026