CVE-2026-113209

A flaw was found in the Navigation component of Google Chrome. A remote attacker can exploit a memory corruption vulnerability by convincing a user to open a specially crafted HTML page, leading to information disclosure. A successful attack enables the adversary to read sensitive memory contents...

CVE-2026-113142

A flaw was found in the Extensions component of Chromium. This vulnerability allows a remote attacker to cause information disclosure by reading process memory inside the browser sandbox. To exploit the flaw, an attacker must convince a user to load a specially crafted HTML page, triggering memor...

CVE-2026-113193

A flaw was found in chromium-browser. This flaw leads to information disclosure due to a memory corruption issue in the V8 JavaScript engine. A remote attacker can exploit this vulnerability by enticing a user to view a specially crafted HTML page. Successful exploitation allows the attacker to...

CVE-2026-113237

A flaw was found in chromium-browser. A memory corruption vulnerability in the Chromoting component allows a remote attacker to read memory from within the browser sandbox an isolated execution environment via a crafted HTML page. Successful exploitation results in unauthorized information...

CVE-2026-113223

A flaw was found in the DevTools component of chromium-browser. A remote attacker could exploit this memory corruption vulnerability by tricking a user into loading a specially crafted HTML page. Successful exploitation could allow the attacker to read memory within the sandbox environment,...

CVE-2026-113224

A flaw was found in the WebAppInstalls component of Chromium. This vulnerability allows a remote attacker to cause information disclosure by convincing a user to open a crafted HTML page. Successful exploitation triggers memory corruption, enabling the attacker to read memory contents from within...

CVE-2026-113178

A flaw was found in chromium-browser. A memory corruption vulnerability in the Views component allows a remote attacker to cause information disclosure by convincing a user to open a specially crafted HTML page. Successful exploitation enables the attacker to read process memory from within the...

CVE-2026-113139

A flaw was found in the Chromium browser Autofill component. A remote attacker could exploit this memory corruption vulnerability by tricking a user into viewing a specially crafted HTML page. Successful exploitation could allow an attacker to read memory within the browser's sandbox environment,...

CVE-2026-114136

A flaw was found in Django REST framework. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service DoS by exhausting server memory. The issue occurs because the JSON parser accepts arbitrary client-supplied charset encodings, including decompression codecs, rathe...

CVE-2026-113343

A flaw was found in chromium-browser. A memory corruption vulnerability exists within the browser sandbox, an isolated security environment designed to contain untrusted processes. A remote attacker could exploit this flaw by enticing a user to load a crafted HTML page, leading to arbitrary code...

CVE-2026-113342

A flaw was found in chromium-browser. A remote attacker can exploit a memory corruption issue in the Network component by tricking a user into visiting a crafted HTML page. Successful exploitation allows the attacker to bypass the security sandbox an isolated execution environment and execute...

CVE-2026-113337

A flaw was found in the Scroll component of Chromium. This vulnerability allows a remote attacker to execute arbitrary code within the browser's isolated sandbox environment by convincing a user to visit a specially crafted HTML page. The issue stems from a memory corruption error during scroll...

CVE-2026-113336

A flaw was found in the Compositing component of Chromium. A remote attacker could execute arbitrary code outside the browser's sandbox environment by tricking a user into visiting a specially crafted HTML page. This issue stems from a memory corruption vulnerability during page compositing...

CVE-2026-113335

A flaw was found in the Extensions component of chromium-browser. This memory corruption issue allows a remote attacker to execute arbitrary code inside the browser's restricted security environment sandbox. To exploit this vulnerability, an attacker must trick a user into visiting a specially...

CVE-2026-113331

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to potentially execute arbitrary code inside the browser sandbox by enticing a user to visit a crafted HTML page. The issue stems from memory corruption within the browser's Controls component...

CVE-2026-113330

A flaw was found in the CustomTabs component of Chromium on Android. A remote attacker could exploit a memory corruption issue by convincing a user to open a specially crafted HTML page. This flaw allows the attacker to execute arbitrary code within the browser's isolated security environment...

CVE-2026-113320

A flaw was found in Google Chrome's Navigation component on iOS. A remote attacker can exploit this memory corruption vulnerability by convincing a user to open a specially crafted HTML page. Successful exploitation allows the attacker to execute arbitrary code within the browser's restricted...

CVE-2026-113318

A flaw was found in chromium-browser. A remote attacker could exploit a memory corruption issue in the ServiceWorker component by convincing a user to visit a specially crafted HTML page. Successful exploitation allows the attacker to execute arbitrary code within the browser's sandbox environmen...

CVE-2026-113313

A flaw was found in the DevTools component of Chromium. A remote attacker could exploit this memory corruption vulnerability by convincing a user to open a specially crafted HTML page. Successful exploitation could allow the attacker to execute arbitrary code within the isolated browser sandbox...

CVE-2026-113303

A flaw was found in the Web Real-Time Communication WebRTC component of chromium-browser. This memory corruption vulnerability allows a remote attacker to achieve arbitrary code execution inside the browser sandbox by convincing a user to visit a specially crafted HTML page...