CVE-2026-118328

Google Chrome versions prior to 156.0.8078.73 are vulnerable to a High severity issue caused by improper input validation in the WebRTC component. A remote attacker can exploit this by leveraging a crafted HTML page to potentially execute arbitrary code within the sandbox. While the vulnerability...

CVE-2026-118336

Google Chrome versions prior to 156.0.8078.73 are vulnerable to a high-severity vulnerability (CVE-2026-118336 ) caused by improper input validation in the Headless component. A remote attacker could leverage a crafted HTML page to potentially execute arbitrary code inside the sandbox or cause a ...

CVE-2026-118358

Google Chrome versions prior to 156.0.8078.73 are vulnerable to memory corruption in the WebAudio component. This flaw allows a remote attacker to potentially execute arbitrary code within the browser sandbox by visiting a crafted HTML page . The issue has been addressed in the 156.0.8078.73 upda...

CVE-2026-118355

Improper input validation in Command in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118352

Memory corruption in Cache in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118351

Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118351

Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118352

Memory corruption in Cache in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118307

Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118355

Google Chrome versions prior to 156.0.8078.73 are vulnerable to a flaw caused by improper input validation in the Command component. This vulnerability allows a remote attacker to potentially execute arbitrary code outside the sandbox by tricking the user into visiting a crafted HTML page. The Ch...

CVE-2026-118307

Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118352

Google Chrome versions prior to 156.0.8078.73 are vulnerable to a memory corruption flaw in the Cache component. A remote attacker can exploit this vulnerability by serving a crafted HTML page to a victim, potentially leading to the execution of arbitrary code within the sandbox. This issue has b...

CVE-2026-118351

Google Chrome versions prior to 156.0.8078.73 are vulnerable to a memory corruption issue in the Skia component. A remote attacker can exploit this by using a crafted HTML page to execute arbitrary code inside the sandbox. The vulnerability has a High security severity. Remediation is available i...

CVE-2026-118307

A Use after free vulnerability exists in the Paint component of Google Chrome (prior to version 156.0.8078.73 ). A remote attacker can exploit this flaw by visiting a crafted HTML page to potentially execute arbitrary code within the sandbox. The vulnerability has been addressed in version 156.0....

CVE-2026-118340

Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118321

Improper input validation in Core in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118321

Google Chrome on Android versions prior to 156.0.8078.73 is vulnerable to a high-severity security issue due to improper input validation in the Core component. A remote attacker could exploit this by using a crafted HTML page to potentially execute arbitrary code outside the sandbox . No specifi...

CVE-2026-118340

Google Chrome versions prior to 156.0.8078.73 are vulnerable to a memory corruption flaw within the Skia component. This vulnerability allows a remote attacker to potentially execute arbitrary code outside the sandbox by processing a crafted HTML page. The Chromium security severity for this issu...

CVE-2026-118354

Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118329

Improper input validation in ANGLE in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...