CVE-2026-113007

A flaw was found in chromium-browser. A memory corruption vulnerability in the Permissions component allows a remote attacker to execute arbitrary code outside the sandbox, which is an isolated security boundary designed to restrict untrusted programs. By convincing a user to open a specially...

CVE-2026-112997

A flaw was found in chromium-browser. A remote attacker could exploit a memory corruption issue in the Cascading Style Sheets CSS engine by enticing a user to load a specially crafted HTML page. Successful exploitation could allow the attacker to execute arbitrary code within the browser's sandbo...

CVE-2026-113004

A flaw was found in chromium-browser. A memory corruption vulnerability in the Sync component allows a remote attacker to achieve arbitrary code execution inside the browser's restricted security environment sandbox. An attacker can exploit this issue by enticing a user to visit a specially craft...

CVE-2026-113008

A flaw was found in the Transactions Platform in Google Chrome. A remote attacker can exploit this memory corruption vulnerability by enticing a user to visit a specially crafted HTML page. Successful exploitation may allow the attacker to execute arbitrary code within the browser's restricted...

CVE-2026-112999

A flaw was found in chromium-browser. A remote attacker can achieve arbitrary code execution inside the browser's sandbox environment by convincing a user to open a specially crafted HTML page. This issue stems from a use-after-free vulnerability in an application programming interface API, where...

CVE-2026-113003

A flaw was found in the Human Interface Device HID component of Chromium. A remote attacker could exploit this vulnerability by convincing a user to visit a specially crafted HTML page, triggering memory corruption. This issue allows the attacker to execute arbitrary code within the browser sandb...

CVE-2026-112998

A flaw was found in chromium-browser. A memory corruption vulnerability in the Views user interface framework allows a remote attacker to execute arbitrary code within the application's sandbox an isolated security environment. To exploit this flaw, an attacker must convince a user to visit a...

CVE-2026-112996

A flaw was found in chromium-browser. A remote attacker can execute arbitrary code inside the browser's restricted execution environment sandbox by convincing a user to open a specially crafted HTML page. This issue is caused by a memory corruption vulnerability in the Loader component...

CVE-2026-112992

A flaw was found in chromium-browser. A remote attacker could exploit a memory corruption vulnerability in the Canvas component by convincing a user to visit a specially crafted web page. Successful exploitation could allow the attacker to execute arbitrary code outside of the browser's security...

Browser-ExternalC2

Browser-EC2...

CVE-2026-113263

A flaw was found in chromium-browser. This flaw allows a remote attacker to achieve arbitrary code execution outside the browser sandbox by enticing a user to view a specially crafted HTML page. The vulnerability stems from a use-after-free memory error in the Core component, which occurs when...

CVE-2026-113300

A flaw was found in the Forms component of chromium-browser. This vulnerability allows a remote attacker to achieve arbitrary code execution outside of the browser security sandbox. By tricking a user into visiting a specially crafted HTML page, an attacker can trigger an out-of-bounds memory wri...

CVE-2026-113222

A flaw was found in Chromium's V8 engine. A remote attacker could exploit this use-after-free vulnerability by convincing a user to visit a specially crafted HTML page. Successful exploitation could allow the attacker to execute arbitrary code outside the browser sandbox...

CVE-2026-113189

A flaw was found in chromium-browser. This flaw allows a remote attacker to achieve arbitrary code execution outside the browser sandbox by enticing a user to visit a specially crafted HTML page. The issue stems from a use-after-free memory management vulnerability in the Core component, which ca...

CVE-2025-69581

CVE-2025-69581 An issue was discovered in Chamillo LMS 1.11.2. The Social Network /personaldata endpoint exposes full sensitive user information even after logout because proper cache-control is missing. Using the browser back button restores all personal data, allowing unauthorized users on the...

SUSE CVE-2026-112994

Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

SUSE CVE-2026-113073

Use after free in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-113127

Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113270

A flaw was found in chromium-browser. A remote attacker can execute arbitrary code outside the browser sandbox by tricking a user into loading a specially crafted HTML page. This issue is caused by a use-after-free memory corruption vulnerability within the Internals component...

CVE-2024-5139

The Authentication Endpoint accepts user-supplied input without sufficient encoding, allowing for the injection of malicious JavaScript payloads. This vulnerability can be triggered by submitting crafted input to the Authentication Endpoint. Successful exploitation allows an attacker to redirect...