CVE-2026-113072

Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-113280

Memory corruption in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-113280

Memory corruption in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-113303

Memory corruption in WebRTC in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-113271

Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-113280

A memory corruption vulnerability in the Paint component of Google Chrome (prior to version 156.0.8078.47) allows a remote attacker to execute arbitrary code inside the sandbox. This can be triggered by viewing a crafted HTML page . The issue was reported by Xinyang Ge on 2026-10-06 and is addres...

CVE-2026-113271

Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-113072

Google Chrome versions prior to 156.0.8078.47 are vulnerable to a memory corruption flaw in the handling of Cascading Style Sheets (CSS) . A remote attacker can exploit this vulnerability by tricking a user into viewing a specially crafted HTML page, which could potentially lead to the execution ...

CVE-2026-113303

A memory corruption vulnerability in WebRTC within Google Chrome versions prior to 156.0.8078.47 allows a remote attacker to potentially execute arbitrary code inside the sandbox. The vulnerability can be triggered via a crafted HTML page . Remediation is available in version 156.0.8078.47 for Wi...

CVE-2026-113280

Memory corruption in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-113303

Memory corruption in WebRTC in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-113072

Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-113271

Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-113271

A Use after free vulnerability exists in the Accessibility component of Google Chrome prior to version 156.0.8078.47 . This flaw allows a remote attacker to execute arbitrary code inside the sandbox by navigating to a crafted HTML page . The vulnerability was reported by Xinyang Ge (Anthropic) . ...

CVE-2026-113279

Memory corruption in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-113279

Memory corruption in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-113279

A memory corruption vulnerability exists in the Accessibility component of Google Chrome prior to version 156.0.8078.47 . A remote attacker could exploit this by navigating to a crafted HTML page to potentially execute arbitrary code within the sandbox. This issue was reported by Xinyang Ge on 20...

CVE-2026-113279

Memory corruption in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...

Malicious code in rs-lookout-sandbox-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f28ed1c404dad5afc7b70b345eeef6f81e04dcee77be3a7553956c7a43f8e7c On module load, index.js reads os.userInfo.username and issues an HTTPS GET to a hardcoded third-party collector at...

MAL-2026-18109 Malicious code in rs-lookout-sandbox-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f28ed1c404dad5afc7b70b345eeef6f81e04dcee77be3a7553956c7a43f8e7c On module load, index.js reads os.userInfo.username and issues an HTTPS GET to a hardcoded third-party collector at...