CVE-2026-118309

Google Chrome on Android versions prior to 156.0.8078.73 are vulnerable to a high-severity issue caused by improper input validation in the UI. A remote attacker can exploit this by using a crafted HTML page to potentially execute arbitrary code outside the sandbox . For the Debian stable distrib...

CVE-2026-118312

A memory corruption vulnerability exists in the Paint component of Google Chrome in versions prior to 156.0.8078.73 . This flaw allows a remote attacker to potentially execute arbitrary code outside the sandbox by navigating to a crafted HTML page. The vulnerability is categorized as a Medium sev...

CVE-2026-118309

Incorrect reference resolution in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: High...

CVE-2026-118312

Observable discrepancy in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-118312

Memory corruption in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-118315

Type confusion in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118309

Incorrect reference resolution in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: High...

CVE-2026-118315

Google Chrome versions prior to 156.0.8078.73 are vulnerable to a high-severity security issue caused by improper input validation in SVG . A remote attacker could exploit this by using a crafted HTML page to potentially execute arbitrary code inside the sandbox. The vulnerability impacts confide...

CVE-2026-118356

A Use after free vulnerability exists in the WTF component of Google Chrome prior to version 156.0.8078.73 . This flaw allows a remote attacker to execute arbitrary code inside the sandbox by serving a crafted HTML page to the victim. The vulnerability has been observed in the wild according to e...

CVE-2026-118356

Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118330

Use after free in Browser in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118341

Use after free in Modularization in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118341

Use after free in Modularization in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118347

Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118347

Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118341

Google Chrome versions prior to 156.0.8078.73 are vulnerable to a Use after free flaw within the Modularization component. This vulnerability allows a remote attacker to execute arbitrary code inside the sandbox by navigating to a crafted HTML page . Exploitation details are not provided in the d...

CVE-2026-118330

A Use after free vulnerability in the Browser component of Google Chrome on Windows allows a remote attacker to execute arbitrary code inside the sandbox using a crafted HTML page. This vulnerability affects versions prior to 156.0.8078.73 . Remediation requires updating to the latest version of ...

CVE-2026-118347

Google Chrome versions prior to 156.0.8078.73 are affected by a Use after free vulnerability in the FileSystem component. This flaw allows a remote attacker to execute arbitrary code inside the sandbox by leveraging a crafted HTML page . The vulnerability has a High security severity. No specific...

CVE-2026-118314

Google Chrome on Android versions prior to 156.0.8078.73 is vulnerable to a high-severity security issue due to improper input validation in the UI. A remote attacker can leverage this flaw by providing a crafted HTML page to potentially execute arbitrary code within the sandbox. To mitigate this...

CVE-2026-118330

Use after free in Browser in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...