CVE-2026-118307

Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118355

Use after free in Command in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118351

Google Chrome versions prior to 156.0.8078.73 are vulnerable to a memory corruption issue in the Skia component. A remote attacker can exploit this by using a crafted HTML page to execute arbitrary code inside the sandbox. The vulnerability has a High security severity. Remediation is available i...

CVE-2026-118352

Memory corruption in Cache in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118351

Use after free in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118352

Google Chrome versions prior to 156.0.8078.73 are vulnerable to a memory corruption flaw in the Cache component. A remote attacker can exploit this vulnerability by serving a crafted HTML page to a victim, potentially leading to the execution of arbitrary code within the sandbox. This issue has b...

CVE-2026-118351

Use after free in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118352

Use after free in Cache in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118355

Use after free in Command in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118355

A high-severity improper input validation flaw exists in the Command component of Google Chrome (prior to version 156.0.8078.73 ). A remote attacker could exploit this vulnerability by serving a crafted HTML page to a victim, potentially leading to arbitrary code execution outside the sandbox. Im...

CVE-2026-118307

A Use after free vulnerability exists in the Paint component of Google Chrome (prior to version 156.0.8078.73 ). A remote attacker can exploit this flaw by visiting a crafted HTML page to potentially execute arbitrary code within the sandbox. The vulnerability has been addressed in version 156.0....

CVE-2026-118307

Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118340

Integer overflow in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-118354

Uninitialized resource in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-118354

Google Chrome versions prior to 156.0.8078.73 are vulnerable to a high-severity security issue (CVE-2026-118354) caused by improper input validation in the Skia component. A remote attacker could exploit this by serving a crafted HTML page to a victim, potentially leading to arbitrary code execut...

CVE-2026-118340

Integer overflow in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-118340

A memory corruption vulnerability exists in Skia within Google Chrome versions prior to 156.0.8078.73 . This flaw allows a remote attacker to potentially execute arbitrary code outside the sandbox by interacting with a crafted HTML page. The vulnerability has been addressed in the stable distribu...

CVE-2026-118329

Uninitialized resource in ANGLE in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118329

Google Chrome on Mac versions prior to 156.0.8078.73 is vulnerable to a High severity security issue (CVE-2026-118329) caused by improper input validation in the ANGLE component. A remote attacker can exploit this flaw by using a crafted HTML page to potentially execute arbitrary code inside the ...

CVE-2026-118329

Uninitialized resource in ANGLE in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...