CVE-2026-113235

A flaw was found in the Passwords component of chromium-browser. An improper input validation vulnerability allows a remote attacker to potentially execute arbitrary code outside of the browser's isolated security environment sandbox. To exploit this vulnerability, an attacker must trick a user...

CVE-2026-113231

A flaw was found in chromium-browser. Improper input validation within the Extensions component allows a remote attacker to execute arbitrary code inside the browser sandbox environment by convincing a user to visit a crafted HTML page...

CVE-2026-113226

A flaw was found in chromium-browser. A memory corruption issue in the Model component allows a remote attacker to execute arbitrary code within the browser's isolated security environment sandbox. To exploit this vulnerability, an attacker must persuade a user to visit or load a specially crafte...

CVE-2026-113214

A flaw was found in Google Chrome's FullScreen component. Due to improper input validation, a remote attacker could convince a user to open a specially crafted HTML page to execute arbitrary code within the browser's restricted sandbox environment...

CVE-2026-113188

A flaw was found in the Graphics Processing Unit GPU component of chromium-browser. This flaw allows a remote attacker to execute arbitrary code inside the browser's sandbox environment. To exploit this vulnerability, the attacker must convince a user to view a specially crafted HTML page,...

CVE-2026-113194

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to execute arbitrary code inside the browser's sandbox, an isolated execution environment. An attacker can exploit this issue by convincing a user to open a specially crafted HTML page, triggering memory corruption ...

CVE-2026-113204

A flaw was found in the Trusted Web Activities component of the Chromium browser. A remote attacker could exploit this vulnerability by convincing a user to load a specially crafted HTML page, triggering a use-after-free condition where the application references memory that has already been...

CVE-2026-113185

A flaw was found in the Extensions component of chromium-browser. This vulnerability allows a remote attacker to execute arbitrary code within the browser sandbox. An attacker could exploit this memory corruption issue by convincing a user to visit a specially crafted HTML page...

CVE-2026-113183

A flaw was found in the Federated Credential Management FedCM component of chromium-browser. This memory corruption vulnerability allows a remote attacker to potentially execute arbitrary code within the browser sandbox by convincing a user to visit a crafted HTML page. Successful exploitation...

CVE-2026-113182

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to execute arbitrary code inside the sandbox by convincing a user to visit a specially crafted HTML page. The issue stems from memory corruption within the Passwords component...

CVE-2026-113180

A flaw was found in the ContentCapture component of Google Chrome on Android. This memory corruption vulnerability allows a remote attacker to execute arbitrary code within the browser sandbox by enticing a victim to open a specially crafted HTML page...

CVE-2026-113173

A flaw was found in Google Chrome. This vulnerability allows a remote attacker to execute arbitrary code within the sandbox an isolated security environment by convincing a user to visit a crafted HTML page. The issue is caused by improper input validation in the user interface UI component...

CVE-2026-113172

A flaw was found in chromium-browser. A memory corruption vulnerability in the ServiceWorker component allows a remote attacker to execute arbitrary code within the browser sandbox by tricking a user into visiting a crafted HTML page. Successful exploitation compromises the browser's isolated...

CVE-2026-113118

A flaw was found in chromium-browser. A memory corruption vulnerability in the Extensions component allows a remote attacker to execute arbitrary code within the browser's sandbox an isolated security environment. An attacker could exploit this vulnerability by convincing a user to view a special...

php2shell-POC

CVE-2026-109618 - "PHP2Shell" proof of concept Remote code ex...

php: fatal error handling retains stale request state leading to use-after-free

A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...

php: fatal error handling retains stale request state leading to use-after-free

A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...

php: fatal error handling retains stale request state leading to use-after-free

A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...

php2shell-poc

CVE-2026-109618 / CVE-2026-109619 — PHP upload-progress RCE P...

CVE-2026-113162

A flaw was found in chromium-browser. Due to improper input validation in the Actor component, a remote attacker can potentially execute arbitrary code within the browser's restricted sandbox environment by convincing a user to view a specially crafted HTML page...