CVE-2026-118304

Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118316

Google Chrome versions prior to 156.0.8078.73 are vulnerable to a high-severity issue caused by improper input validation within the V8 engine. A remote attacker could exploit this vulnerability by using a crafted HTML page to potentially achieve arbitrary code execution outside the sandbox. No s...

CVE-2026-118345

Google Chrome versions prior to 156.0.8078.73 are vulnerable to a Use after free flaw in the PDFium component. This vulnerability allows a remote attacker to potentially execute arbitrary code inside the sandbox by leveraging a crafted HTML page . The issue is classified with High security severi...

CVE-2026-118304

Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118316

Use after free in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118313

Out of bounds write in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118346

Google Chrome versions prior to 156.0.8078.73 are vulnerable to a Use after free vulnerability in the Compositing component. This flaw allows a remote attacker to potentially execute arbitrary code inside the sandbox by leveraging a crafted HTML page. Exploitation details and specific exploit lin...

CVE-2026-118343

Use after free in ReadingList in Google Chrome prior to 156.0.8078.73 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118311

Use after free in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118311

Use after free in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118334

Google Chrome versions prior to 156.0.8078.73 are vulnerable to a Use after free flaw in the ImageCapture component. A remote attacker could exploit this vulnerability by leveraging a crafted HTML page to achieve arbitrary code execution within the sandbox. Impact levels include ACE , DoS , and S...

CVE-2026-118334

Use after free in ImageCapture in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118332

Use after free in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118334

Use after free in ImageCapture in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118343

Use after free in ReadingList in Google Chrome prior to 156.0.8078.73 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118343

Google Chrome versions prior to 156.0.8078.73 are vulnerable to a High severity security issue (CVE-2026-118343) caused by improper input validation in the ReadingList component. A remote attacker could exploit this by using a crafted HTML page to potentially execute arbitrary code inside the san...

CVE-2026-118332

Improper input validation in Compositing in Google Chrome prior to version 156.0.8078.73 allows a remote attacker to potentially execute arbitrary code outside the sandbox. This vulnerability can be triggered by a remote attacker using a crafted HTML page . No specific exploit information or dire...

CVE-2026-118311

A memory corruption vulnerability in the Media component of Google Chrome (prior to version 156.0.8078.73 ) allows a remote attacker to potentially execute arbitrary code inside the sandbox. This can be achieved by navigating to a crafted HTML page . The vulnerability is rated with High severity....

CVE-2026-118349

Use after free in Payments in Google Chrome prior to 156.0.8078.73 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118349

Use after free in Payments in Google Chrome prior to 156.0.8078.73 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...