CVE-2026-113138

Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113153

Memory corruption in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-112997

Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113037

Use after free in WebSockets in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113153

A memory corruption vulnerability in the SiteIsolation component of Google Chrome (versions prior to 156.0.8078.47 ) allows a remote attacker to potentially execute arbitrary code inside the sandbox. This is achieved by having the victim navigate to a crafted HTML page . While the Chromium securi...

CVE-2026-113028

Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113177

Use after free in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113028

A use after free vulnerability in the Media component of Google Chrome (prior to version 156.0.8078.47 ) allows a remote attacker to execute arbitrary code inside the sandbox. This attack can be initiated by a victim visiting a crafted HTML page . The vulnerability is assigned a Chromium security...

CVE-2026-113120

Google Chrome versions prior to 156.0.8078.47 are vulnerable to an improper input validation flaw within the Media component. A remote attacker can exploit this by hosting a crafted HTML page , potentially leading to arbitrary code execution within the sandbox. The impact is rated as high, with a...

CVE-2026-113177

Use after free in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113120

Improper input validation in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113120

Improper input validation in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113028

Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113120

Improper input validation in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113028

Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113177

Use after free in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113177

A use-after-free condition exists in the FileSystem component of Google Chrome (prior to version 156.0.8078.47). This vulnerability occurs when memory is improperly accessed after it has been released, potentially allowing a remote attacker to execute arbitrary code inside the browser sandbox by ...

CVE-2026-113270

Use after free in Internals in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113270

Use after free in Internals in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113099

Google Chrome on Android (versions prior to 156.0.8078.47 ) is vulnerable to a Medium severity issue caused by improper input validation in the Omnibox component. A remote attacker can exploit this by leveraging a crafted HTML page to potentially achieve arbitrary code execution inside the sandbo...