CVE-2026-113219

A flaw was found in the Contacts component of Google Chrome. A remote attacker could exploit this memory corruption issue by convincing a user to visit a specially crafted HTML page. Successful exploitation allows the attacker to execute arbitrary code within the browser's sandbox environment...

CVE-2026-113232

A flaw was found in Chromium's Search component. A remote attacker could exploit this memory corruption vulnerability by enticing a user to view a specially crafted HTML page. Successful exploitation could allow the attacker to execute arbitrary code within the browser's sandbox environment...

CVE-2026-113192

A flaw was found in chromium-browser. A remote attacker can execute arbitrary code inside the browser's sandbox environment by exploiting a memory corruption vulnerability in the V8 JavaScript engine. To trigger this flaw, the attacker must convince a user to visit a specially crafted web page...

CVE-2026-113206

A flaw was found in the Omnibox component of Google Chrome. A remote attacker could exploit this memory corruption vulnerability by tricking a user into visiting a specially crafted webpage. Successful exploitation could allow the attacker to execute arbitrary code within the browser's restricted...

CVE-2026-113186

A flaw was found in chromium-browser. A remote attacker can achieve arbitrary code execution outside the browser sandbox by tricking a user into visiting a specially crafted HTML webpage. This vulnerability is caused by a memory corruption error in the Developer Tools DevTools component. If...

CVE-2026-113176

A flaw was found in chromium-browser. A remote attacker could exploit this vulnerability by enticing a user to visit a crafted HTML page. Successful exploitation causes memory corruption in the browser address bar Omnibox, which may allow the attacker to execute arbitrary code within the restrict...

CVE-2026-113184

A flaw was found in the Scheduling component of chromium-browser. A remote attacker could exploit this memory corruption vulnerability by convincing a user to visit a specially crafted HTML page. Successful exploitation may allow an attacker to execute arbitrary code within the browser sandbox an...

CVE-2026-113169

A flaw was found in the WebAppInstalls component of Google Chrome on Android. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page, triggering memory corruption. Successful exploitation allows the attacker to execute arbitrary code outside o...

CVE-2026-113175

A flaw was found in chromium-browser. Due to improper input validation in the FileSystem component, a remote attacker can convince a user to visit a specially crafted HTML page to achieve arbitrary code execution. Successful exploitation allows the attacker to run unauthorized commands within the...

kernel: ALSA: seq: close a re-opened queue timer in the destructor

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture sequencer component. An unprivileged local user with access to the sound device can exploit a timing window during the cleanup of a queue timer. This allows the user to re-open a timer that has already been closed,...

kernel: xfs: bounds-check buffer log item's dirty bitmap

A flaw was found in the Linux kernel's XFS filesystem. A local attacker, by mounting a specially crafted XFS image, could trigger an out-of-bounds write during log recovery. This vulnerability allows for kernel heap corruption, which could lead to a denial of service or potentially arbitrary code...

kernel: xfs: bounds-check buffer log item's dirty bitmap

A flaw was found in the Linux kernel's XFS filesystem. A local attacker, by mounting a specially crafted XFS image, could trigger an out-of-bounds write during log recovery. This vulnerability allows for kernel heap corruption, which could lead to a denial of service or potentially arbitrary code...

kernel: ALSA: seq: close a re-opened queue timer in the destructor

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture sequencer component. An unprivileged local user with access to the sound device can exploit a timing window during the cleanup of a queue timer. This allows the user to re-open a timer that has already been closed,...

CVE-2026-113152

A flaw was found in chromium-browser. A remote attacker could trigger a memory corruption vulnerability in the SignIn component by enticing a user to visit a crafted HTML page. Successful exploitation may allow the attacker to execute arbitrary code inside the browser sandbox...

CVE-2026-113150

A flaw was found in the Bindings component of Chromium. A remote attacker could exploit this vulnerability by enticing a user into visiting a specially crafted HTML page. Successful exploitation leads to memory corruption, which may allow the attacker to execute arbitrary code within the browser'...

CVE-2026-113166

A flaw was found in chromium-browser. A remote attacker could exploit this memory corruption vulnerability in the browsing history feature by convincing a user to view a specially crafted web page. Successful exploitation allows the attacker to execute arbitrary code within the browser's restrict...

CVE-2026-113148

A flaw was found in chromium-browser's Web user interface WebUI component. A remote attacker could potentially achieve arbitrary code execution within the browser's sandbox environment by tricking a user into visiting a specially crafted HTML page. This vulnerability is caused by a memory...

CVE-2026-113132

A flaw was found in the DevTools component of Chromium. A remote attacker could exploit this memory corruption vulnerability by enticing a user to load a specially crafted HTML page. Successful exploitation may allow an attacker to execute arbitrary code inside the browser sandbox...

CVE-2026-113131

A flaw was found in the Bluetooth component of Chromium. This vulnerability allows a remote attacker to achieve arbitrary code execution inside the browser's sandbox an isolated execution environment by tricking a user into visiting a specially crafted HTML page. The issue stems from memory...

CVE-2026-113145

A flaw was found in Google Chrome's Messages component on Android. A remote attacker could exploit this memory corruption vulnerability by convincing a user to open a crafted HTML page. Successful exploitation could allow the attacker to execute arbitrary code within the browser's restricted...