CVE-2026-113062

Missing authorization in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113062

A vulnerability in Google Chrome prior to version 156.0.8078.47 stems from improper input validation in an API. This flaw allows a remote attacker to potentially execute arbitrary code inside the sandbox by serving a crafted HTML page to a victim. The technical details specify a Medium Chromium s...

CVE-2026-113120

Google Chrome versions prior to 156.0.8078.47 are vulnerable to an improper input validation flaw within the Media component. A remote attacker can exploit this by hosting a crafted HTML page , potentially leading to arbitrary code execution within the sandbox. The impact is rated as high, with a...

CVE-2026-113120

Use of uninitialized variable in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113120

Use of uninitialized variable in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113016

Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113016

In Google Chrome versions prior to 156.0.8078.47 , a vulnerability exists due to improper input validation within the Extensions component. This flaw could allow a remote attacker to execute arbitrary code inside the sandbox by viewing a crafted HTML page. No specific exploit details or direct re...

CVE-2026-113016

Race condition in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113084

Incorrect authorization in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113084

Google Chrome versions prior to 156.0.8078.47 are vulnerable to an improper input validation flaw within the Permissions component. This security issue allows a remote attacker to potentially achieve arbitrary code execution outside the sandbox by tricking a user into visiting a crafted HTML page...

CVE-2026-113084

Incorrect authorization in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113195

Improper input validation in Downloads in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113195

Google Chrome versions prior to 156.0.8078.47 are vulnerable to a vulnerability caused by improper input validation within the Downloads component. A remote attacker can exploit this by serving a crafted HTML page to potentially execute arbitrary code inside the sandbox. No specific exploit infor...

CVE-2026-113060

UI misrepresentation in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed an adjacent attacker leveraging social engineering to spoof UI elements via a malicious peripheral. Chromium security severity: Medium...

CVE-2026-113060

UI misrepresentation in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed an adjacent attacker leveraging social engineering to spoof UI elements via a malicious peripheral. Chromium security severity: Medium...

CVE-2026-113060

Google Chrome versions prior to 156.0.8078.47 are vulnerable to a vulnerability caused by improper input validation in the Bluetooth component. A remote attacker could leverage this flaw by providing a crafted HTML page to potentially achieve arbitrary code execution within the browser sandbox. T...

CVE-2026-113060

UI misrepresentation in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed an adjacent attacker leveraging social engineering to spoof UI elements via a malicious peripheral. Chromium security severity: Medium...

CVE-2026-113162

Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113162

Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113162

Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...