CVE-2026-113230

A flaw was found in Google Chrome. Improper input validation allows a remote attacker to execute arbitrary code inside the browser's restricted sandbox environment by enticing a user to visit a specially crafted HTML page. Although the execution is confined to the sandbox isolation layer,...

CVE-2026-113239

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to achieve arbitrary code execution within the browser's restricted sandbox environment by enticing a user to visit a specially crafted HTML page. The issue stems from a range validation error in the SiteIsolation...

CVE-2026-113241

A flaw was found in the Toolbar component of Google Chrome. A remote attacker could exploit this memory corruption vulnerability by tricking a user into visiting a crafted HTML webpage. This could allow the attacker to execute arbitrary code within the application's restricted sandbox environment...

CVE-2026-113235

A flaw was found in the Passwords component of chromium-browser. An improper input validation vulnerability allows a remote attacker to potentially execute arbitrary code outside of the browser's isolated security environment sandbox. To exploit this vulnerability, an attacker must trick a user...

CVE-2026-113238

A flaw was found in chromium-browser. A remote attacker can exploit a memory corruption vulnerability in the CustomTabs feature by convincing a user to visit a specially crafted web page. Successful exploitation could allow the attacker to execute arbitrary code within the isolated browser sandbo...

CVE-2026-111755 vulnerabilities

Vulnerabilities for packages: nextcloud-server, configurable-http-proxy, langfuse-fips, lambda-nodejs, opensearch-dashboards, code-server, commercial-gitlab-rails-ee-fips, unleash, lerna, prism, kibana, wazuh-dashboard, opensearch-dashboards-fips, redisinsight, semaphore, kubeflow-pipelines,...

GHSA-8R9P-F939-6H3C vulnerabilities

Vulnerabilities for packages: nextcloud-server, configurable-http-proxy, langfuse-fips, lambda-nodejs, opensearch-dashboards, code-server, commercial-gitlab-rails-ee-fips, unleash, lerna, prism, kibana, wazuh-dashboard, opensearch-dashboards-fips, redisinsight, semaphore, kubeflow-pipelines,...

GHSA-Q3JH-WRC6-JGQ8 vulnerabilities

Vulnerabilities for packages: nextcloud-server, configurable-http-proxy, langfuse-fips, lambda-nodejs, opensearch-dashboards, code-server, commercial-gitlab-rails-ee-fips, unleash, lerna, prism, kibana, wazuh-dashboard, opensearch-dashboards-fips, redisinsight, semaphore, kubeflow-pipelines,...

CVE-2026-111756 vulnerabilities

Vulnerabilities for packages: nextcloud-server, configurable-http-proxy, langfuse-fips, lambda-nodejs, opensearch-dashboards, code-server, commercial-gitlab-rails-ee-fips, unleash, lerna, prism, kibana, wazuh-dashboard, opensearch-dashboards-fips, redisinsight, semaphore, kubeflow-pipelines,...

CVE-2026-113226

A flaw was found in chromium-browser. A memory corruption issue in the Model component allows a remote attacker to execute arbitrary code within the browser's isolated security environment sandbox. To exploit this vulnerability, an attacker must persuade a user to visit or load a specially crafte...

CVE-2026-113231

A flaw was found in chromium-browser. Improper input validation within the Extensions component allows a remote attacker to execute arbitrary code inside the browser sandbox environment by convincing a user to visit a crafted HTML page...

CVE-2026-113213

A flaw was found in chromium-browser. A remote attacker can execute arbitrary code inside the browser sandbox by tricking a user into loading a specially crafted HTML page. This vulnerability is caused by memory corruption within the DevTools component when processing untrusted web content...

CVE-2026-113220

A flaw was found in chromium-browser. A remote attacker could exploit a memory corruption issue in the Extensions component by tricking a user into visiting a specially crafted HTML page, potentially allowing arbitrary code execution within the browser's sandbox. While execution is confined to th...

CVE-2026-113211

A flaw was found in chromium-browser. A remote attacker could execute arbitrary code outside the browser sandbox an isolated security environment by exploiting a memory corruption vulnerability in the ServiceWorker component. To exploit this flaw, an attacker must convince a user to visit a...

CVE-2026-113219

A flaw was found in the Contacts component of Google Chrome. A remote attacker could exploit this memory corruption issue by convincing a user to visit a specially crafted HTML page. Successful exploitation allows the attacker to execute arbitrary code within the browser's sandbox environment...

CVE-2026-113232

A flaw was found in Chromium's Search component. A remote attacker could exploit this memory corruption vulnerability by enticing a user to view a specially crafted HTML page. Successful exploitation could allow the attacker to execute arbitrary code within the browser's sandbox environment...

CVE-2026-113214

A flaw was found in Google Chrome's FullScreen component. Due to improper input validation, a remote attacker could convince a user to open a specially crafted HTML page to execute arbitrary code within the browser's restricted sandbox environment...

CVE-2026-113192

A flaw was found in chromium-browser. A remote attacker can execute arbitrary code inside the browser's sandbox environment by exploiting a memory corruption vulnerability in the V8 JavaScript engine. To trigger this flaw, the attacker must convince a user to visit a specially crafted web page...

CVE-2026-113188

A flaw was found in the Graphics Processing Unit GPU component of chromium-browser. This flaw allows a remote attacker to execute arbitrary code inside the browser's sandbox environment. To exploit this vulnerability, the attacker must convince a user to view a specially crafted HTML page,...

CVE-2026-113206

A flaw was found in the Omnibox component of Google Chrome. A remote attacker could exploit this memory corruption vulnerability by tricking a user into visiting a specially crafted webpage. Successful exploitation could allow the attacker to execute arbitrary code within the browser's restricted...