CVE-2026-113212

A memory corruption vulnerability exists in the PDF component of Google Chrome versions prior to 156.0.8078.47 . A remote attacker could potentially exploit this issue by viewing a crafted HTML page . The Chromium security severity for this issue is rated as High . No specific exploit details or ...

CVE-2026-113212

Memory corruption in PDF in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially via a crafted HTML page. Chromium security severity: High...

CVE-2026-113309

Out of bounds read in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-113040

Google Chrome versions prior to 156.0.8078.47 are vulnerable to a High severity security issue caused by improper input validation within the Proxy component. A remote attacker could exploit this flaw by delivering a crafted HTML page to potentially execute arbitrary code inside the browser sandb...

CVE-2026-113040

Improper input validation in Proxy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-113040

Improper input validation in Proxy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-113295

Out of bounds read in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-113334

Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-113334

Google Chrome on Windows versions prior to 156.0.8078.47 is vulnerable to a High severity security issue. The root cause is improper input validation within the ANGLE component, which could allow a remote attacker to execute arbitrary code inside the sandbox by viewing a crafted HTML page . While...

CVE-2026-113334

Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-113225

A memory corruption vulnerability in the Browser component of Google Chrome on Android (prior to version 156.0.8078.47 ) allows a remote attacker to potentially read memory inside the sandbox. This can be triggered by a remote attacker using a crafted HTML page . The vulnerability is classified a...

CVE-2026-113225

Memory corruption in Browser in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-113225

Memory corruption in Browser in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-113117

Google Chrome on Mac prior to version 156.0.8078.47 is vulnerable to arbitrary code execution within the sandbox due to improper input validation in the ANGLE component. A remote attacker can trigger this vulnerability by hosting a crafted HTML page . Remediation is available in the stable channe...

CVE-2026-113117

Improper input validation in ANGLE in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-113117

Improper input validation in ANGLE in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-113082

Google Chrome on Windows versions prior to 156.0.8078.47 is vulnerable to a memory corruption flaw in the ANGLE component. A remote attacker can exploit this by serving a crafted HTML page to a user, potentially allowing them to read memory inside the sandbox. This issue has been addressed in the...

CVE-2026-113082

Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-113654

A flaw was found in sanitize-html. A remote attacker can bypass HTML sanitization by submitting specially crafted markup when the library is configured to strip noscript tags. In this scenario, the parser can prematurely terminate the discard region, allowing unsanitized content to persist and...

CVE-2026-113650

A flaw was found in sanitize-html. A remote attacker can cause a Denial of Service DoS by submitting specially crafted HTML input containing disallowed iframe elements. Under default configurations, the library re-sanitizes iframe content through unbounded recursive calls, exhausting system...