CVE-2026-113244

A flaw was found in chromium-browser. Due to improper input validation in the user interface UI, a remote attacker could execute arbitrary code within the restricted browser sandbox by convincing a user to visit a specially crafted HTML page. Successful exploitation allows the attacker to run...

CVE-2026-113247

A flaw was found in chromium-browser. A memory corruption vulnerability in Developer Tools DevTools allows a remote attacker to achieve arbitrary code execution within the browser's sandbox. By convincing a user to open a specially crafted HTML page, an attacker can exploit this issue to execute...

CVE-2026-113245

A flaw was found in Chromium DevTools. A remote attacker could exploit a memory corruption vulnerability to achieve arbitrary code execution within the browser's sandbox an isolated security environment by enticing a user to load a specially crafted HTML page...

CVE-2026-113230

A flaw was found in Google Chrome. Improper input validation allows a remote attacker to execute arbitrary code inside the browser's restricted sandbox environment by enticing a user to visit a specially crafted HTML page. Although the execution is confined to the sandbox isolation layer,...

CVE-2026-113239

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to achieve arbitrary code execution within the browser's restricted sandbox environment by enticing a user to visit a specially crafted HTML page. The issue stems from a range validation error in the SiteIsolation...

CVE-2026-113241

A flaw was found in the Toolbar component of Google Chrome. A remote attacker could exploit this memory corruption vulnerability by tricking a user into visiting a crafted HTML webpage. This could allow the attacker to execute arbitrary code within the application's restricted sandbox environment...

CVE-2026-113238

A flaw was found in chromium-browser. A remote attacker can exploit a memory corruption vulnerability in the CustomTabs feature by convincing a user to visit a specially crafted web page. Successful exploitation could allow the attacker to execute arbitrary code within the isolated browser sandbo...

CVE-2026-113235

A flaw was found in the Passwords component of chromium-browser. An improper input validation vulnerability allows a remote attacker to potentially execute arbitrary code outside of the browser's isolated security environment sandbox. To exploit this vulnerability, an attacker must trick a user...

CVE-2026-111755 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, commercial-gitlab-rails-ee-fips, unleash-fips, gitlab-rails-ce, azurite, code-server, kibana, lerna, homepage, lambda-nodejs, opensearch-dashboards...

CVE-2026-111756 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, commercial-gitlab-rails-ee-fips, unleash-fips, gitlab-rails-ce, azurite, code-server, kibana, lerna, homepage, lambda-nodejs, opensearch-dashboards...

GHSA-8R9P-F939-6H3C vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, commercial-gitlab-rails-ee-fips, unleash-fips, gitlab-rails-ce, azurite, code-server, kibana, lerna, homepage, lambda-nodejs, opensearch-dashboards...

GHSA-Q3JH-WRC6-JGQ8 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, commercial-gitlab-rails-ee-fips, unleash-fips, gitlab-rails-ce, azurite, code-server, kibana, lerna, homepage, lambda-nodejs, opensearch-dashboards...

CVE-2026-113213

A flaw was found in chromium-browser. A remote attacker can execute arbitrary code inside the browser sandbox by tricking a user into loading a specially crafted HTML page. This vulnerability is caused by memory corruption within the DevTools component when processing untrusted web content...

CVE-2026-113231

A flaw was found in chromium-browser. Improper input validation within the Extensions component allows a remote attacker to execute arbitrary code inside the browser sandbox environment by convincing a user to visit a crafted HTML page...

CVE-2026-113220

A flaw was found in chromium-browser. A remote attacker could exploit a memory corruption issue in the Extensions component by tricking a user into visiting a specially crafted HTML page, potentially allowing arbitrary code execution within the browser's sandbox. While execution is confined to th...

CVE-2026-113226

A flaw was found in chromium-browser. A memory corruption issue in the Model component allows a remote attacker to execute arbitrary code within the browser's isolated security environment sandbox. To exploit this vulnerability, an attacker must persuade a user to visit or load a specially crafte...

CVE-2026-113219

A flaw was found in the Contacts component of Google Chrome. A remote attacker could exploit this memory corruption issue by convincing a user to visit a specially crafted HTML page. Successful exploitation allows the attacker to execute arbitrary code within the browser's sandbox environment...

CVE-2026-113211

A flaw was found in chromium-browser. A remote attacker could execute arbitrary code outside the browser sandbox an isolated security environment by exploiting a memory corruption vulnerability in the ServiceWorker component. To exploit this flaw, an attacker must convince a user to visit a...

CVE-2026-113232

A flaw was found in Chromium's Search component. A remote attacker could exploit this memory corruption vulnerability by enticing a user to view a specially crafted HTML page. Successful exploitation could allow the attacker to execute arbitrary code within the browser's sandbox environment...

CVE-2026-113214

A flaw was found in Google Chrome's FullScreen component. Due to improper input validation, a remote attacker could convince a user to open a specially crafted HTML page to execute arbitrary code within the browser's restricted sandbox environment...