CVE-2026-113149

A flaw was found in the FullScreen component of Chromium. A remote attacker could exploit this memory corruption vulnerability by enticing a user to view a specially crafted HTML page. Successful exploitation allows the attacker to execute arbitrary code within the confines of the browser sandbox...

CVE-2026-113135

A flaw was found in the Picture-in-Picture component of Google Chrome. This memory corruption vulnerability allows a remote attacker to potentially execute arbitrary code inside the sandbox an isolated security environment by convincing a user to visit a crafted HTML page...

CVE-2026-113136

A flaw was found in chromium-browser. A memory corruption issue in the DevTools component allows a remote attacker to achieve arbitrary code execution within the browser's isolated sandbox. To exploit this vulnerability, an attacker must convince a user to open a specially crafted HTML page...

php: fatal error handling retains stale request state leading to use-after-free

A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...

CVE-2026-113127

A flaw was found in chromium-browser. This memory corruption vulnerability allows a remote attacker to achieve arbitrary code execution within the browser's restricted sandbox environment. Exploitation requires an attacker to convince a user to visit a specially crafted HTML Hypertext Markup...

CVE-2026-113126

A flaw was found in chromium-browser. A memory corruption issue in the PolicyContainer component allows a remote attacker to execute arbitrary code outside the browser's restricted sandbox environment. To exploit this vulnerability, an attacker must convince a user to open a specially crafted HTM...

CVE-2026-113124

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to execute arbitrary code within the browser sandbox by convincing a user to visit a crafted web page. The issue is caused by memory corruption in the DataTransfer component...

CVE-2026-113104

A flaw was found in chromium-browser. A memory corruption vulnerability exists in the Frames component, which allows a remote attacker to potentially execute arbitrary code within the browser sandbox. An attacker could exploit this flaw by convincing a user to visit a specially crafted HTML page...

CVE-2026-113120

A flaw was found in Chromium's Media component. Improper input validation allows a remote attacker to potentially execute arbitrary code inside the browser's restricted sandbox environment by enticing a user to visit a specially crafted HTML page...

CVE-2026-113121

A flaw was found in the ContextMenu component of Chromium on Android. This memory corruption vulnerability allows a remote attacker to execute arbitrary code within the browser's restricted environment sandbox. To exploit the flaw, the attacker must persuade a user to visit a specially crafted HT...

CVE-2026-113093

A flaw was found in the DisplayLocking component of chromium-browser. This memory corruption vulnerability allows a remote attacker to potentially achieve arbitrary code execution within the browser's restricted security sandbox. Exploitation requires convincing a user to open a specially crafted...

CVE-2026-113110

A flaw was found in chromium-browser. A memory corruption issue exists within the browser's Shadow DOM component. A remote attacker could exploit this vulnerability by enticing a user to load a specially crafted HTML page, potentially allowing arbitrary code execution within the browser sandbox...

CVE-2026-113086

A flaw was found in Google Chrome's Input component. This vulnerability allows a remote attacker to execute arbitrary code within the restricted browser sandbox by convincing a user to visit a specially crafted HTML page. The issue stems from improper validation of input during processing...

CVE-2026-113072

A flaw was found in chromium-browser. A memory corruption vulnerability exists in the handling of Cascading Style Sheets CSS. A remote attacker could exploit this flaw by convincing a user to view a specially crafted HTML page, potentially leading to arbitrary code execution outside the browser's...

CVE-2026-113089

A flaw was found in the PrintPreview component of chromium-browser. Due to improper input validation, a remote attacker could exploit this vulnerability by enticing a user to view a specially crafted HTML page. Successful exploitation could allow the attacker to escape the browser sandbox and...

CVE-2026-113090

A flaw was found in chromium-browser. A remote attacker could execute arbitrary code within the browser sandbox by tricking a user into visiting a crafted HTML page. This issue is caused by a memory corruption vulnerability within the Interstitials component...

CVE-2026-113064

A flaw was found in chromium-browser. A memory corruption vulnerability in the OptimizationGuide component allows a remote attacker to execute arbitrary code within the browser sandbox by convincing a user to open a crafted HTML page. Although execution is restricted to the sandbox environment,...

CVE-2026-113056

A flaw was found in the PerformanceAPIs component of chromium-browser. This memory corruption vulnerability allows a remote attacker to execute arbitrary code outside the browser sandbox by enticing a user to visit a crafted HTML page. Successful exploitation could allow the attacker to compromis...

CVE-2026-113062

A flaw was found in chromium-browser. Due to improper input validation in an application programming interface API, a remote attacker can potentially execute arbitrary code within the browser's sandbox environment by convincing a user to visit a specially crafted HTML page...

CVE-2026-113060

A flaw was found in chromium-browser. Improper input validation in the Bluetooth component allows a remote attacker to potentially execute arbitrary code inside the browser's isolated sandbox environment by convincing a user to visit a crafted HTML page...