CVE-2026-113168

Incomplete cleanup in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-113256

A use after free vulnerability exists in the Permissions component of Google Chrome versions prior to 156.0.8078.47 . This flaw allows a remote attacker to execute arbitrary code inside the sandbox by interacting with a crafted HTML page. The vulnerability is associated with CWE-416 . Exploitatio...

CVE-2026-113256

Improper privilege management in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-113168

Use after free in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-113103

Race condition in WebProtect in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass system access restrictions via a crafted PDF file. Chromium security severity: Low...

CVE-2026-113114

Incorrect authorization in SignIn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-113323

UI misrepresentation in Chrome for iOS in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-113015

Google Chrome versions prior to 156.0.8078.47 are vulnerable to a use after free issue within the Workers component. A remote attacker can exploit this vulnerability by navigating the victim to a crafted HTML page , potentially leading to arbitrary code execution inside the browser sandbox. Remed...

CVE-2026-113323

Google Chrome on iOS versions prior to 156.0.8078.47 is vulnerable to a Use after free (CWE-416) flaw. This issue could allow a remote attacker to potentially execute arbitrary code inside the sandbox by viewing a crafted HTML page. No specific exploit details or in-the-wild exploitation informat...

CVE-2026-113114

A Use after free vulnerability in the SignIn component of Google Chrome (prior to version 156.0.8078.47 ) allows a remote attacker to execute arbitrary code inside the sandbox. This can be triggered by navigating to a crafted HTML page . While the Chromium security severity is listed as Low , the...

CVE-2026-113091

A Use after free vulnerability in the PerformanceAPIs of Google Chrome on Android (versions prior to 156.0.8078.47 ) allows a remote attacker to execute arbitrary code inside the sandbox. The attack can be initiated by a victim navigating to a crafted HTML page . No specific exploit links or in-t...

CVE-2026-113091

Information leak in PerformanceAPIs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-113323

UI misrepresentation in Chrome for iOS in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-113015

Incorrect authorization in Workers in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-113015

Incorrect authorization in Workers in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-113015

Incorrect authorization in Workers in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-113114

Incorrect authorization in SignIn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-113114

Incorrect authorization in SignIn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-113323

UI misrepresentation in Chrome for iOS in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-113091

Use after free in PerformanceAPIs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...