CVE-2026-113172

A flaw was found in chromium-browser. A memory corruption vulnerability in the ServiceWorker component allows a remote attacker to execute arbitrary code within the browser sandbox by tricking a user into visiting a crafted HTML page. Successful exploitation compromises the browser's isolated...

CVE-2026-113175

A flaw was found in chromium-browser. Due to improper input validation in the FileSystem component, a remote attacker can convince a user to visit a specially crafted HTML page to achieve arbitrary code execution. Successful exploitation allows the attacker to run unauthorized commands within the...

CVE-2026-113146

A flaw was found in chromium-browser. This flaw allows a remote attacker to execute arbitrary code inside the browser's sandbox environment due to a memory corruption vulnerability in the Performance Application Programming Interfaces APIs. Exploitation is achieved by convincing a user to visit a...

CVE-2026-113118

A flaw was found in chromium-browser. A memory corruption vulnerability in the Extensions component allows a remote attacker to execute arbitrary code within the browser's sandbox an isolated security environment. An attacker could exploit this vulnerability by convincing a user to view a special...

CVE-2026-114141 toml-node: Quadratic-complexity DoS via many array-of-tables headers in toml.parse()

toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, the toml.parse compiler's addTableArray function in lib/compiler.js rescans the complete assignedPaths and valueAssignments bookkeeping sets for every array-of-tables header. Distinct name paths are not pruned, so a document...

CVE-2026-113030

A flaw was found in chromium-browser. Due to improper access control within the V8 JavaScript engine, a remote attacker can bypass the web origin policy by convincing a user to visit a crafted HTML page. The web origin policy is a foundational security boundary designed to isolate different...

CVE-2026-113122

A flaw was found in the Loader component of chromium-browser. By convincing a user to load a specially crafted HTML page, a remote attacker can trigger memory corruption within the browser. This issue may allow the attacker to read memory contents inside the isolated environment sandbox, leading ...

CVE-2026-113144

A flaw was found in chromium-browser. A remote attacker could exploit a memory corruption vulnerability in the Speech component by convincing a user to visit a specially crafted HTML page. Successful exploitation allows the attacker to read memory within the browser sandbox, resulting in...

CVE-2026-113129

A flaw was found in chromium-browser. Improper access control in the Extensions component allows a remote attacker to cause sensitive information disclosure. By convincing a user to visit a specially crafted HTML page, an attacker could exploit this vulnerability to access sensitive data...

CVE-2026-113051

A flaw was found in chromium-browser. A memory corruption vulnerability within the Cascading Style Sheets CSS engine allows a remote attacker to cause an information disclosure. By convincing a user to visit a specially crafted HTML page, an attacker can exploit this issue to read sensitive memor...

CVE-2026-113077

A flaw was found in chromium-browser. A remote attacker could exploit a memory corruption issue by convincing a user to visit a specially crafted HTML page. This flaw allows the attacker to read memory from within the browser's isolated security environment sandbox, resulting in unauthorized...

CVE-2026-113159

A flaw was found in chromium-browser. An improper access control weakness within Developer Tools DevTools allows a remote attacker to potentially expose sensitive data. By tricking a user into opening a specially crafted HTML page, the attacker can leverage this vulnerability to gain unauthorized...

CVE-2026-113047

A flaw was found in chromium-browser. A remote attacker could exploit a memory corruption vulnerability in the BrowserTag component by tricking a user into opening a specially crafted HTML page. Successful exploitation allows the attacker to read memory within the browser sandbox an isolated...

CVE-2026-113137

A flaw was found in chromium-browser. A remote attacker can exploit a memory corruption vulnerability in the Extensions component by enticing a user to view a crafted HTML page. Successful exploitation allows the attacker to read memory contents within the sandbox, leading to unauthorized...

CVE-2026-113128

A flaw was found in chromium-browser. Missing authorization in the Animation component allows a remote attacker to bypass the web origin policy by convincing a victim to visit a crafted HTML page. Successful exploitation could lead to information disclosure by allowing an unauthorized website to...

CVE-2026-113057

A flaw was found in chromium-browser. An improper access control issue in the Compute Pressure feature allows a remote attacker to bypass the Same-Origin Policy SOP via a crafted HTML page. By convincing a user to visit a malicious website, an attacker can access sensitive information or resource...

CVE-2026-113038

A flaw was found in DevTools in chromium-browser. This memory corruption issue allows a remote attacker to cause information disclosure by convincing a user to load a specially crafted HTML page. A successful exploit enables the attacker to read memory contents within the sandbox environment...

CVE-2026-113026

A flaw was found in the PDF component of chromium-browser. A remote attacker could exploit this memory corruption issue by convincing a user to visit a specially crafted HTML page. Successful exploitation allows the attacker to read sensitive memory within the application sandbox, resulting in...

CVE-2026-113164

A flaw was found in the Voice component of Google Chrome. A remote attacker can execute arbitrary code inside the browser's sandbox an isolated security environment by enticing a user to visit a specially crafted HTML page. This vulnerability is caused by a memory corruption flaw within the...

CVE-2026-113162

A flaw was found in chromium-browser. Due to improper input validation in the Actor component, a remote attacker can potentially execute arbitrary code within the browser's restricted sandbox environment by convincing a user to view a specially crafted HTML page...