CVE-2026-113009

A Use after free vulnerability in the WindowControlsOverlay component of Google Chrome prior to version 156.0.8078.47 allows a remote attacker to execute arbitrary code inside the sandbox. This exploitation can be achieved by navigating the victim to a crafted HTML page . No specific exploitation...

CVE-2026-113060

Improper input validation in the Bluetooth component of Google Chrome prior to version 156.0.8078.47 allows a remote attacker to potentially achieve arbitrary code execution inside the sandbox. This attack can be initiated through a crafted HTML page . The reported Chromium security severity is M...

CVE-2026-113189

A Use after free vulnerability in the Core component of Google Chrome (prior to version 156.0.8078.47 ) allows a remote attacker to execute arbitrary code outside the sandbox. This exploit is triggered by navigating to a crafted HTML page . No specific exploit links or in-the-wild exploitation de...

CVE-2026-113194

Google Chrome versions prior to 156.0.8078.47 are vulnerable to a memory corruption flaw in the Core component. A remote attacker can exploit this by viewing a crafted HTML page to achieve arbitrary code execution within the sandbox. The Chromium security severity for this issue is rated as Mediu...

CVE-2026-113208

A Use after free vulnerability exists in the ContextualSearch component of Google Chrome prior to version 156.0.8078.47 . This flaw allows a remote attacker to execute arbitrary code inside the sandbox by interacting with a crafted HTML page. No specific exploit links or in-the-wild exploitation ...

CVE-2026-113238

A memory corruption vulnerability exists in CustomTabs within Google Chrome on Android prior to version 156.0.8078.47 . A remote attacker can leverage a crafted HTML page to potentially achieve arbitrary code execution inside the sandbox. The vulnerability is associated with CWE-119 (Improper Res...

CVE-2026-113112

Google Chrome versions prior to 156.0.8078.47 are vulnerable to a Use after free vulnerability within the Extensions component. This flaw allows a remote attacker to execute arbitrary code inside the sandbox by interacting with a crafted HTML page . No specific exploit information or in-the-wild ...

CVE-2026-113321

A Use after free vulnerability in the Extensions component of Google Chrome versions prior to 156.0.8078.47 allows a remote attacker to execute arbitrary code inside the sandbox. The attack can be initiated by viewing a crafted HTML page . No specific exploit code or in-the-wild exploitation deta...

CVE-2026-113059

Google Chrome versions prior to 156.0.8078.47 are vulnerable to a memory corruption issue within the Sensor component. A remote attacker can exploit this flaw by navigating the victim to a crafted HTML page , potentially leading to arbitrary code execution inside the sandbox. The vulnerability is...

CVE-2026-113272

A memory corruption vulnerability exists in the Extensions component of Google Chrome versions prior to 156.0.8078.47 . This flaw, categorized under CWE-119 , allows a remote attacker to potentially execute arbitrary code inside the sandbox by viewing a crafted HTML page . No specific exploit det...

CVE-2026-113118

A memory corruption vulnerability exists in the Extensions component of Google Chrome prior to version 156.0.8078.47 . A remote attacker can exploit this flaw by navigating a victim to a crafted HTML page , potentially leading to arbitrary code execution inside the sandbox. No specific exploit in...

CVE-2026-113162

A remote attacker can potentially execute arbitrary code inside the sandbox of Google Chrome prior to version 156.0.8078.47 . The vulnerability is caused by improper input validation within the Actor component when processing a crafted HTML page . No specific exploitation details or exploit links...

CVE-2026-113327

A use after free vulnerability exists in the Chromecast component of Google Chrome versions prior to 156.0.8078.47 . A remote attacker can leverage this flaw by serving a crafted HTML page to execute arbitrary code within the sandbox. No specific exploit details or in-the-wild exploitation data a...

CVE-2026-112999

A Use after free vulnerability in an API within Google Chrome prior to version 156.0.8078.47 allows a remote attacker to execute arbitrary code inside the sandbox. This execution is triggered by hosting a crafted HTML page . Exploitation details and specific exploit links are not provided in the ...

CVE-2026-113232

A memory corruption vulnerability exists in the Search component of Google Chrome prior to version 156.0.8078.47 . This flaw allows a remote attacker to potentially achieve arbitrary code execution within the sandbox by navigating to a crafted HTML page . The vulnerability is associated with CWE-...

CVE-2026-113249

Improper input validation in Google Chrome on iOS prior to version 156.0.8078.47 allows a remote attacker to potentially execute arbitrary code inside the sandbox. This vulnerability can be triggered through a crafted HTML page . The severity is rated as Medium by Chromium. No specific exploit co...

CVE-2026-113183

A memory corruption vulnerability exists in the FedCM component of Google Chrome versions prior to 156.0.8078.47 . This flaw, categorized as CWE-119 , allows a remote attacker to potentially achieve arbitrary code execution inside the sandbox by leveraging a crafted HTML page . No specific exploi...

CVE-2026-113205

Google Chrome versions prior to 156.0.8078.47 are vulnerable to a Use after free flaw within the Variations component. A remote attacker can leverage this vulnerability to execute arbitrary code inside the sandbox by hosting a crafted HTML page . No information regarding specific exploits or in-t...

CVE-2026-113146

A memory corruption vulnerability exists in the PerformanceAPIs component of Google Chrome versions prior to 156.0.8078.47 . A remote attacker could leverage this flaw by hosting a crafted HTML page to potentially achieve arbitrary code execution within the sandbox. The vulnerability is classifie...

CVE-2026-113207

A Use after free vulnerability exists in SiteIsolation within Google Chrome on Android versions prior to 156.0.8078.47 . This flaw allows a remote attacker to achieve arbitrary code execution inside the sandbox by viewing a crafted HTML page . No specific exploit links or details are provided in ...