CVE-2026-118353

Missing authorization in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-118327

Incorrect authorization in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: High...

CVE-2026-118327

Incorrect authorization in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: High...

CVE-2026-118353

Google Chrome versions prior to 156.0.8078.73 are vulnerable to a Use after free flaw in the Paint component. A remote attacker can exploit this vulnerability by interacting with a crafted HTML page to achieve arbitrary code execution within the sandbox. This issue has been addressed in the 156.0...

CVE-2026-118359

Use after free in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118353

Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118359

Google Chrome versions prior to 156.0.8078.73 are vulnerable to a memory corruption issue within the V8 engine. A remote attacker can exploit this vulnerability by serving a crafted HTML page to a victim, potentially leading to arbitrary code execution inside the sandbox. This vulnerability is cl...

CVE-2026-118349

Google Chrome versions prior to 156.0.8078.73 are vulnerable to a memory corruption issue within the Payments component. A remote attacker can exploit this vulnerability by using a crafted HTML page to achieve arbitrary code execution within the sandbox. Remediation is available in version 156.0....

CVE-2026-118358

Memory corruption in WebAudio in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118358

Use after free in WebAudio in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118328

Out of bounds read in WebRTC in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118328

Out of bounds read in WebRTC in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118336

Improper input validation in Headless in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118358

Google Chrome versions prior to 156.0.8078.73 are vulnerable to memory corruption in the WebAudio component. This flaw allows a remote attacker to potentially execute arbitrary code within the browser sandbox by visiting a crafted HTML page . The issue has been addressed in the 156.0.8078.73 upda...

CVE-2026-118328

Google Chrome versions prior to 156.0.8078.73 are vulnerable to a High severity issue caused by improper input validation in the WebRTC component. A remote attacker can exploit this by leveraging a crafted HTML page to potentially execute arbitrary code within the sandbox. While the vulnerability...

CVE-2026-118336

Race condition in Headless in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118336

Google Chrome versions prior to 156.0.8078.73 are vulnerable to a high-severity vulnerability (CVE-2026-118336 ) caused by improper input validation in the Headless component. A remote attacker could leverage a crafted HTML page to potentially execute arbitrary code inside the sandbox or cause a ...

CVE-2026-118355

Use after free in Command in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118351

Google Chrome versions prior to 156.0.8078.73 are vulnerable to a memory corruption issue in the Skia component. A remote attacker can exploit this by using a crafted HTML page to execute arbitrary code inside the sandbox. The vulnerability has a High security severity. Remediation is available i...

CVE-2026-118307

Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...