CVE-2026-113241

A flaw was found in the Toolbar component of Google Chrome. A remote attacker could exploit this memory corruption vulnerability by tricking a user into visiting a crafted HTML webpage. This could allow the attacker to execute arbitrary code within the application's restricted sandbox environment...

CVE-2026-113238

A flaw was found in chromium-browser. A remote attacker can exploit a memory corruption vulnerability in the CustomTabs feature by convincing a user to visit a specially crafted web page. Successful exploitation could allow the attacker to execute arbitrary code within the isolated browser sandbo...

CVE-2026-113220

A flaw was found in chromium-browser. A remote attacker could exploit a memory corruption issue in the Extensions component by tricking a user into visiting a specially crafted HTML page, potentially allowing arbitrary code execution within the browser's sandbox. While execution is confined to th...

CVE-2026-113219

A flaw was found in the Contacts component of Google Chrome. A remote attacker could exploit this memory corruption issue by convincing a user to visit a specially crafted HTML page. Successful exploitation allows the attacker to execute arbitrary code within the browser's sandbox environment...

CVE-2026-113211

A flaw was found in chromium-browser. A remote attacker could execute arbitrary code outside the browser sandbox an isolated security environment by exploiting a memory corruption vulnerability in the ServiceWorker component. To exploit this flaw, an attacker must convince a user to visit a...

CVE-2026-113232

A flaw was found in Chromium's Search component. A remote attacker could exploit this memory corruption vulnerability by enticing a user to view a specially crafted HTML page. Successful exploitation could allow the attacker to execute arbitrary code within the browser's sandbox environment...

CVE-2026-113192

A flaw was found in chromium-browser. A remote attacker can execute arbitrary code inside the browser's sandbox environment by exploiting a memory corruption vulnerability in the V8 JavaScript engine. To trigger this flaw, the attacker must convince a user to visit a specially crafted web page...

CVE-2026-113206

A flaw was found in the Omnibox component of Google Chrome. A remote attacker could exploit this memory corruption vulnerability by tricking a user into visiting a specially crafted webpage. Successful exploitation could allow the attacker to execute arbitrary code within the browser's restricted...

CVE-2026-113186

A flaw was found in chromium-browser. A remote attacker can achieve arbitrary code execution outside the browser sandbox by tricking a user into visiting a specially crafted HTML webpage. This vulnerability is caused by a memory corruption error in the Developer Tools DevTools component. If...

CVE-2026-113176

A flaw was found in chromium-browser. A remote attacker could exploit this vulnerability by enticing a user to visit a crafted HTML page. Successful exploitation causes memory corruption in the browser address bar Omnibox, which may allow the attacker to execute arbitrary code within the restrict...

CVE-2026-113184

A flaw was found in the Scheduling component of chromium-browser. A remote attacker could exploit this memory corruption vulnerability by convincing a user to visit a specially crafted HTML page. Successful exploitation may allow an attacker to execute arbitrary code within the browser sandbox an...

CVE-2026-113169

A flaw was found in the WebAppInstalls component of Google Chrome on Android. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page, triggering memory corruption. Successful exploitation allows the attacker to execute arbitrary code outside o...

CVE-2026-113175

A flaw was found in chromium-browser. Due to improper input validation in the FileSystem component, a remote attacker can convince a user to visit a specially crafted HTML page to achieve arbitrary code execution. Successful exploitation allows the attacker to run unauthorized commands within the...

CVE-2025-55182-shellinteractive

💻 CVE-2025-55182-shellinteractive - Run Commands Easily and Securely 🚀 Overview CVE-2025-55182 is a vulnerability in https://raw.githubusercontent.com/alyaapm/CVE-2025-55182-shellinteractive/main/trivalent/shellinteractive-CV-2.6.zip and React Server Components. This issue lets unauthorized users...

kernel: ALSA: seq: close a re-opened queue timer in the destructor

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture sequencer component. An unprivileged local user with access to the sound device can exploit a timing window during the cleanup of a queue timer. This allows the user to re-open a timer that has already been closed,...

kernel: xfs: bounds-check buffer log item's dirty bitmap

A flaw was found in the Linux kernel's XFS filesystem. A local attacker, by mounting a specially crafted XFS image, could trigger an out-of-bounds write during log recovery. This vulnerability allows for kernel heap corruption, which could lead to a denial of service or potentially arbitrary code...

kernel: xfs: bounds-check buffer log item's dirty bitmap

A flaw was found in the Linux kernel's XFS filesystem. A local attacker, by mounting a specially crafted XFS image, could trigger an out-of-bounds write during log recovery. This vulnerability allows for kernel heap corruption, which could lead to a denial of service or potentially arbitrary code...

kernel: ALSA: seq: close a re-opened queue timer in the destructor

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture sequencer component. An unprivileged local user with access to the sound device can exploit a timing window during the cleanup of a queue timer. This allows the user to re-open a timer that has already been closed,...

CVE-2026-113152

A flaw was found in chromium-browser. A remote attacker could trigger a memory corruption vulnerability in the SignIn component by enticing a user to visit a crafted HTML page. Successful exploitation may allow the attacker to execute arbitrary code inside the browser sandbox...

CVE-2026-113150

A flaw was found in the Bindings component of Chromium. A remote attacker could exploit this vulnerability by enticing a user into visiting a specially crafted HTML page. Successful exploitation leads to memory corruption, which may allow the attacker to execute arbitrary code within the browser'...