CVE-2026-113235

A flaw was found in the Passwords component of chromium-browser. An improper input validation vulnerability allows a remote attacker to potentially execute arbitrary code outside of the browser's isolated security environment sandbox. To exploit this vulnerability, an attacker must trick a user...

CVE-2026-113238

A flaw was found in chromium-browser. A remote attacker can exploit a memory corruption vulnerability in the CustomTabs feature by convincing a user to visit a specially crafted web page. Successful exploitation could allow the attacker to execute arbitrary code within the isolated browser sandbo...

CVE-2026-113226

A flaw was found in chromium-browser. A memory corruption issue in the Model component allows a remote attacker to execute arbitrary code within the browser's isolated security environment sandbox. To exploit this vulnerability, an attacker must persuade a user to visit or load a specially crafte...

CVE-2026-113231

A flaw was found in chromium-browser. Improper input validation within the Extensions component allows a remote attacker to execute arbitrary code inside the browser sandbox environment by convincing a user to visit a crafted HTML page...

CVE-2026-113220

A flaw was found in chromium-browser. A remote attacker could exploit a memory corruption issue in the Extensions component by tricking a user into visiting a specially crafted HTML page, potentially allowing arbitrary code execution within the browser's sandbox. While execution is confined to th...

CVE-2026-113213

A flaw was found in chromium-browser. A remote attacker can execute arbitrary code inside the browser sandbox by tricking a user into loading a specially crafted HTML page. This vulnerability is caused by memory corruption within the DevTools component when processing untrusted web content...

CVE-2026-113219

A flaw was found in the Contacts component of Google Chrome. A remote attacker could exploit this memory corruption issue by convincing a user to visit a specially crafted HTML page. Successful exploitation allows the attacker to execute arbitrary code within the browser's sandbox environment...

CVE-2026-113211

A flaw was found in chromium-browser. A remote attacker could execute arbitrary code outside the browser sandbox an isolated security environment by exploiting a memory corruption vulnerability in the ServiceWorker component. To exploit this flaw, an attacker must convince a user to visit a...

CVE-2026-113192

A flaw was found in chromium-browser. A remote attacker can execute arbitrary code inside the browser's sandbox environment by exploiting a memory corruption vulnerability in the V8 JavaScript engine. To trigger this flaw, the attacker must convince a user to visit a specially crafted web page...

CVE-2026-113206

A flaw was found in the Omnibox component of Google Chrome. A remote attacker could exploit this memory corruption vulnerability by tricking a user into visiting a specially crafted webpage. Successful exploitation could allow the attacker to execute arbitrary code within the browser's restricted...

CVE-2026-113188

A flaw was found in the Graphics Processing Unit GPU component of chromium-browser. This flaw allows a remote attacker to execute arbitrary code inside the browser's sandbox environment. To exploit this vulnerability, the attacker must convince a user to view a specially crafted HTML page,...

CVE-2026-113194

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to execute arbitrary code inside the browser's sandbox, an isolated execution environment. An attacker can exploit this issue by convincing a user to open a specially crafted HTML page, triggering memory corruption ...

CVE-2026-113204

A flaw was found in the Trusted Web Activities component of the Chromium browser. A remote attacker could exploit this vulnerability by convincing a user to load a specially crafted HTML page, triggering a use-after-free condition where the application references memory that has already been...

CVE-2026-113186

A flaw was found in chromium-browser. A remote attacker can achieve arbitrary code execution outside the browser sandbox by tricking a user into visiting a specially crafted HTML webpage. This vulnerability is caused by a memory corruption error in the Developer Tools DevTools component. If...

CVE-2026-113176

A flaw was found in chromium-browser. A remote attacker could exploit this vulnerability by enticing a user to visit a crafted HTML page. Successful exploitation causes memory corruption in the browser address bar Omnibox, which may allow the attacker to execute arbitrary code within the restrict...

CVE-2026-113185

A flaw was found in the Extensions component of chromium-browser. This vulnerability allows a remote attacker to execute arbitrary code within the browser sandbox. An attacker could exploit this memory corruption issue by convincing a user to visit a specially crafted HTML page...

CVE-2026-113183

A flaw was found in the Federated Credential Management FedCM component of chromium-browser. This memory corruption vulnerability allows a remote attacker to potentially execute arbitrary code within the browser sandbox by convincing a user to visit a crafted HTML page. Successful exploitation...

CVE-2026-113184

A flaw was found in the Scheduling component of chromium-browser. A remote attacker could exploit this memory corruption vulnerability by convincing a user to visit a specially crafted HTML page. Successful exploitation may allow an attacker to execute arbitrary code within the browser sandbox an...

CVE-2026-113182

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to execute arbitrary code inside the sandbox by convincing a user to visit a specially crafted HTML page. The issue stems from memory corruption within the Passwords component...

CVE-2026-113180

A flaw was found in the ContentCapture component of Google Chrome on Android. This memory corruption vulnerability allows a remote attacker to execute arbitrary code within the browser sandbox by enticing a victim to open a specially crafted HTML page...