CVE-2026-113255

A Use after free vulnerability in CustomTabs within Google Chrome on Android versions prior to 156.0.8078.47 allows a remote attacker to execute arbitrary code inside the sandbox. The attack can be initiated through a crafted HTML page . No specific exploitation details or in-the-wild occurrences...

CVE-2026-113328

Google Chrome versions prior to 156.0.8078.47 are vulnerable to a Medium severity security flaw. The issue stems from improper input validation within the Privacy component, which could allow a remote attacker to execute arbitrary code outside the sandbox by interacting with a crafted HTML page. ...

CVE-2026-113335

A memory corruption vulnerability exists in the Extensions component of Google Chrome prior to version 156.0.8078.47 . This flaw, associated with CWE-119 , allows a remote attacker to execute arbitrary code inside the sandbox byviewing a crafted HTML page. No specific exploit information or detai...

CVE-2026-113042

A Use after free vulnerability exists in the Extensions component of Google Chrome versions prior to 156.0.8078.47 . A remote attacker can exploit this flaw by providing a crafted HTML page to achieve arbitrary code execution within the sandbox. No specific exploit links or in-the-wild exploitati...

CVE-2026-113206

Google Chrome versions prior to 156.0.8078.47 are vulnerable to a memory corruption flaw in the Omnibox component. This vulnerability (CWE-119) allows a remote attacker to execute arbitrary code inside the sandbox by interacting with a crafted HTML page. The Chromium security severity is rated as...

CVE-2026-113276

Google Chrome on Android versions prior to 156.0.8078.47 is vulnerable to a memory corruption flaw within the Passwords component. This vulnerability, categorized as CWE-119 , could allow a remote attacker to potentially execute arbitrary code inside the sandbox by viewing a crafted HTML page. No...

CVE-2026-113185

A memory corruption vulnerability exists in Extensions within Google Chrome prior to version 156.0.8078.47 . This flaw allows a remote attacker to execute arbitrary code inside the sandbox by viewing a crafted HTML page . The root cause is identified as an improper restriction of operations withi...

CVE-2026-113171

Google Chrome on Android versions prior to 156.0.8078.47 is vulnerable to memory corruption within the Prompts component. A remote attacker can exploit this flaw by providing a crafted HTML page to potentially execute arbitrary code outside the sandbox . No specific exploit information or in-the-...

CVE-2026-113261

A Use after free vulnerability exists in WebAppInstalls in Google Chrome versions prior to 156.0.8078.47 . A remote attacker could potentially execute arbitrary code outside the sandbox by viewing a crafted HTML page. No specific exploit information or in-the-wild exploitation details are provide...

CVE-2026-113262

A use after free vulnerability in the Extensions component of Google Chrome prior to version 156.0.8078.47 allows a remote attacker to potentially execute arbitrary code inside the sandbox. This attack can be triggered by navigating to a crafted HTML page . Exploitation details are not provided i...

CVE-2026-113172

A memory corruption vulnerability in the ServiceWorker component of Google Chrome (prior to version 156.0.8078.47 ) allows a remote attacker to potentially execute arbitrary code within the sandbox. This is achieved by interacting with a crafted HTML page . While the Chromium security severity is...

CVE-2026-113332

Google Chrome versions prior to 156.0.8078.47 are vulnerable to a memory corruption issue within the GPU component. A remote attacker can exploit this vulnerability by serving a crafted HTML page to execute arbitrary code within the browser sandbox. This vulnerability is categorized under CWE-119...

CVE-2026-113149

A memory corruption vulnerability in the FullScreen component of Google Chrome (prior to version 156.0.8078.47 ) allows a remote attacker to execute arbitrary code inside the sandbox. This is achieved by processing a crafted HTML page . Exploitation details are not provided in the documents.

CVE-2026-112995

A Use after free vulnerability exists in the Animation component of Google Chrome prior to version 156.0.8078.47 . A remote attacker can exploit this flaw by leveraging a crafted HTML page to achieve arbitrary code execution within the sandbox. While the Chromium security severity is rated as Med...

CVE-2026-113071

Google Chrome on Android versions prior to 156.0.8078.47 is vulnerable to a use after free flaw in the Notifications component. A remote attacker can exploit this vulnerability by hosting a crafted HTML page to achieve arbitrary code execution within the sandbox. No specific exploit links or in-t...

CVE-2026-113190

A Use after free vulnerability exists in the ServiceWorker component of Google Chrome prior to version 156.0.8078.47 . A remote attacker could potentially execute arbitrary code inside the sandbox by viewing a crafted HTML page. No specific exploit code or in-the-wild exploitation details are pro...

CVE-2026-113278

A Use after free vulnerability in the Extensions component of Google Chrome (prior to version 156.0.8078.47 ) allows a remote attacker to execute arbitrary code inside the sandbox. This can be triggered by navigating to a crafted HTML page . No specific exploit details or in-the-wild exploitation...

CVE-2026-112992

A memory corruption vulnerability exists in the Canvas component of Google Chrome versions prior to 156.0.8078.47 . This flaw allows a remote attacker to potentially execute arbitrary code outside the sandbox by viewing a crafted HTML page. The vulnerability is associated with CWE-119 (Improper R...

CVE-2026-113009

A Use after free vulnerability in the WindowControlsOverlay component of Google Chrome prior to version 156.0.8078.47 allows a remote attacker to execute arbitrary code inside the sandbox. This exploitation can be achieved by navigating the victim to a crafted HTML page . No specific exploitation...

CVE-2026-113060

Improper input validation in the Bluetooth component of Google Chrome prior to version 156.0.8078.47 allows a remote attacker to potentially achieve arbitrary code execution inside the sandbox. This attack can be initiated through a crafted HTML page . The reported Chromium security severity is M...